Print this page
6583 remove whole-process swapping
| Split |
Close |
| Expand all |
| Collapse all |
--- old/usr/src/uts/common/vm/seg_vn.c
+++ new/usr/src/uts/common/vm/seg_vn.c
1 1 /*
2 2 * CDDL HEADER START
3 3 *
4 4 * The contents of this file are subject to the terms of the
5 5 * Common Development and Distribution License (the "License").
6 6 * You may not use this file except in compliance with the License.
7 7 *
8 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 9 * or http://www.opensolaris.org/os/licensing.
10 10 * See the License for the specific language governing permissions
11 11 * and limitations under the License.
12 12 *
13 13 * When distributing Covered Code, include this CDDL HEADER in each
14 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 15 * If applicable, add the following below this CDDL HEADER, with the
16 16 * fields enclosed by brackets "[]" replaced with your own identifying
17 17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 18 *
19 19 * CDDL HEADER END
20 20 */
21 21 /*
22 22 * Copyright (c) 1986, 2010, Oracle and/or its affiliates. All rights reserved.
23 23 * Copyright 2015, Joyent, Inc. All rights reserved.
24 24 * Copyright 2015 Nexenta Systems, Inc. All rights reserved.
25 25 */
26 26
27 27 /* Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T */
28 28 /* All Rights Reserved */
29 29
30 30 /*
31 31 * University Copyright- Copyright (c) 1982, 1986, 1988
32 32 * The Regents of the University of California
33 33 * All Rights Reserved
34 34 *
35 35 * University Acknowledgment- Portions of this document are derived from
36 36 * software developed by the University of California, Berkeley, and its
37 37 * contributors.
38 38 */
39 39
40 40 /*
41 41 * VM - shared or copy-on-write from a vnode/anonymous memory.
42 42 */
43 43
44 44 #include <sys/types.h>
45 45 #include <sys/param.h>
46 46 #include <sys/t_lock.h>
47 47 #include <sys/errno.h>
48 48 #include <sys/systm.h>
49 49 #include <sys/mman.h>
50 50 #include <sys/debug.h>
51 51 #include <sys/cred.h>
52 52 #include <sys/vmsystm.h>
53 53 #include <sys/tuneable.h>
54 54 #include <sys/bitmap.h>
55 55 #include <sys/swap.h>
56 56 #include <sys/kmem.h>
57 57 #include <sys/sysmacros.h>
58 58 #include <sys/vtrace.h>
59 59 #include <sys/cmn_err.h>
60 60 #include <sys/callb.h>
61 61 #include <sys/vm.h>
62 62 #include <sys/dumphdr.h>
63 63 #include <sys/lgrp.h>
64 64
65 65 #include <vm/hat.h>
66 66 #include <vm/as.h>
67 67 #include <vm/seg.h>
68 68 #include <vm/seg_vn.h>
69 69 #include <vm/pvn.h>
70 70 #include <vm/anon.h>
71 71 #include <vm/page.h>
72 72 #include <vm/vpage.h>
73 73 #include <sys/proc.h>
74 74 #include <sys/task.h>
75 75 #include <sys/project.h>
76 76 #include <sys/zone.h>
77 77 #include <sys/shm_impl.h>
78 78
79 79 /*
80 80 * segvn_fault needs a temporary page list array. To avoid calling kmem all
81 81 * the time, it creates a small (PVN_GETPAGE_NUM entry) array and uses it if
82 82 * it can. In the rare case when this page list is not large enough, it
83 83 * goes and gets a large enough array from kmem.
84 84 *
85 85 * This small page list array covers either 8 pages or 64kB worth of pages -
86 86 * whichever is smaller.
87 87 */
88 88 #define PVN_MAX_GETPAGE_SZ 0x10000
89 89 #define PVN_MAX_GETPAGE_NUM 0x8
90 90
91 91 #if PVN_MAX_GETPAGE_SZ > PVN_MAX_GETPAGE_NUM * PAGESIZE
92 92 #define PVN_GETPAGE_SZ ptob(PVN_MAX_GETPAGE_NUM)
93 93 #define PVN_GETPAGE_NUM PVN_MAX_GETPAGE_NUM
94 94 #else
95 95 #define PVN_GETPAGE_SZ PVN_MAX_GETPAGE_SZ
96 96 #define PVN_GETPAGE_NUM btop(PVN_MAX_GETPAGE_SZ)
97 97 #endif
98 98
99 99 /*
100 100 * Private seg op routines.
101 101 */
102 102 static int segvn_dup(struct seg *seg, struct seg *newseg);
103 103 static int segvn_unmap(struct seg *seg, caddr_t addr, size_t len);
|
↓ open down ↓ |
103 lines elided |
↑ open up ↑ |
104 104 static void segvn_free(struct seg *seg);
105 105 static faultcode_t segvn_fault(struct hat *hat, struct seg *seg,
106 106 caddr_t addr, size_t len, enum fault_type type,
107 107 enum seg_rw rw);
108 108 static faultcode_t segvn_faulta(struct seg *seg, caddr_t addr);
109 109 static int segvn_setprot(struct seg *seg, caddr_t addr,
110 110 size_t len, uint_t prot);
111 111 static int segvn_checkprot(struct seg *seg, caddr_t addr,
112 112 size_t len, uint_t prot);
113 113 static int segvn_kluster(struct seg *seg, caddr_t addr, ssize_t delta);
114 -static size_t segvn_swapout(struct seg *seg);
115 114 static int segvn_sync(struct seg *seg, caddr_t addr, size_t len,
116 115 int attr, uint_t flags);
117 116 static size_t segvn_incore(struct seg *seg, caddr_t addr, size_t len,
118 117 char *vec);
119 118 static int segvn_lockop(struct seg *seg, caddr_t addr, size_t len,
120 119 int attr, int op, ulong_t *lockmap, size_t pos);
121 120 static int segvn_getprot(struct seg *seg, caddr_t addr, size_t len,
122 121 uint_t *protv);
123 122 static u_offset_t segvn_getoffset(struct seg *seg, caddr_t addr);
124 123 static int segvn_gettype(struct seg *seg, caddr_t addr);
125 124 static int segvn_getvp(struct seg *seg, caddr_t addr,
126 125 struct vnode **vpp);
127 126 static int segvn_advise(struct seg *seg, caddr_t addr, size_t len,
128 127 uint_t behav);
129 128 static void segvn_dump(struct seg *seg);
130 129 static int segvn_pagelock(struct seg *seg, caddr_t addr, size_t len,
131 130 struct page ***ppp, enum lock_type type, enum seg_rw rw);
132 131 static int segvn_setpagesize(struct seg *seg, caddr_t addr, size_t len,
133 132 uint_t szc);
134 133 static int segvn_getmemid(struct seg *seg, caddr_t addr,
135 134 memid_t *memidp);
136 135 static lgrp_mem_policy_info_t *segvn_getpolicy(struct seg *, caddr_t);
137 136 static int segvn_capable(struct seg *seg, segcapability_t capable);
138 137 static int segvn_inherit(struct seg *, caddr_t, size_t, uint_t);
|
↓ open down ↓ |
14 lines elided |
↑ open up ↑ |
139 138
140 139 struct seg_ops segvn_ops = {
141 140 segvn_dup,
142 141 segvn_unmap,
143 142 segvn_free,
144 143 segvn_fault,
145 144 segvn_faulta,
146 145 segvn_setprot,
147 146 segvn_checkprot,
148 147 segvn_kluster,
149 - segvn_swapout,
150 148 segvn_sync,
151 149 segvn_incore,
152 150 segvn_lockop,
153 151 segvn_getprot,
154 152 segvn_getoffset,
155 153 segvn_gettype,
156 154 segvn_getvp,
157 155 segvn_advise,
158 156 segvn_dump,
159 157 segvn_pagelock,
160 158 segvn_setpagesize,
161 159 segvn_getmemid,
162 160 segvn_getpolicy,
163 161 segvn_capable,
164 162 segvn_inherit
165 163 };
166 164
167 165 /*
168 166 * Common zfod structures, provided as a shorthand for others to use.
169 167 */
170 168 static segvn_crargs_t zfod_segvn_crargs =
171 169 SEGVN_ZFOD_ARGS(PROT_ZFOD, PROT_ALL);
172 170 static segvn_crargs_t kzfod_segvn_crargs =
173 171 SEGVN_ZFOD_ARGS(PROT_ZFOD & ~PROT_USER,
174 172 PROT_ALL & ~PROT_USER);
175 173 static segvn_crargs_t stack_noexec_crargs =
176 174 SEGVN_ZFOD_ARGS(PROT_ZFOD & ~PROT_EXEC, PROT_ALL);
177 175
178 176 caddr_t zfod_argsp = (caddr_t)&zfod_segvn_crargs; /* user zfod argsp */
179 177 caddr_t kzfod_argsp = (caddr_t)&kzfod_segvn_crargs; /* kernel zfod argsp */
180 178 caddr_t stack_exec_argsp = (caddr_t)&zfod_segvn_crargs; /* executable stack */
181 179 caddr_t stack_noexec_argsp = (caddr_t)&stack_noexec_crargs; /* noexec stack */
182 180
183 181 #define vpgtob(n) ((n) * sizeof (struct vpage)) /* For brevity */
184 182
185 183 size_t segvn_comb_thrshld = UINT_MAX; /* patchable -- see 1196681 */
186 184
187 185 size_t segvn_pglock_comb_thrshld = (1UL << 16); /* 64K */
188 186 size_t segvn_pglock_comb_balign = (1UL << 16); /* 64K */
189 187 uint_t segvn_pglock_comb_bshift;
190 188 size_t segvn_pglock_comb_palign;
191 189
192 190 static int segvn_concat(struct seg *, struct seg *, int);
193 191 static int segvn_extend_prev(struct seg *, struct seg *,
194 192 struct segvn_crargs *, size_t);
195 193 static int segvn_extend_next(struct seg *, struct seg *,
196 194 struct segvn_crargs *, size_t);
197 195 static void segvn_softunlock(struct seg *, caddr_t, size_t, enum seg_rw);
198 196 static void segvn_pagelist_rele(page_t **);
199 197 static void segvn_setvnode_mpss(vnode_t *);
200 198 static void segvn_relocate_pages(page_t **, page_t *);
201 199 static int segvn_full_szcpages(page_t **, uint_t, int *, uint_t *);
202 200 static int segvn_fill_vp_pages(struct segvn_data *, vnode_t *, u_offset_t,
203 201 uint_t, page_t **, page_t **, uint_t *, int *);
204 202 static faultcode_t segvn_fault_vnodepages(struct hat *, struct seg *, caddr_t,
205 203 caddr_t, enum fault_type, enum seg_rw, caddr_t, caddr_t, int);
206 204 static faultcode_t segvn_fault_anonpages(struct hat *, struct seg *, caddr_t,
207 205 caddr_t, enum fault_type, enum seg_rw, caddr_t, caddr_t, int);
208 206 static faultcode_t segvn_faultpage(struct hat *, struct seg *, caddr_t,
209 207 u_offset_t, struct vpage *, page_t **, uint_t,
210 208 enum fault_type, enum seg_rw, int);
211 209 static void segvn_vpage(struct seg *);
212 210 static size_t segvn_count_swap_by_vpages(struct seg *);
213 211
214 212 static void segvn_purge(struct seg *seg);
215 213 static int segvn_reclaim(void *, caddr_t, size_t, struct page **,
216 214 enum seg_rw, int);
217 215 static int shamp_reclaim(void *, caddr_t, size_t, struct page **,
218 216 enum seg_rw, int);
219 217
220 218 static int sameprot(struct seg *, caddr_t, size_t);
221 219
222 220 static int segvn_demote_range(struct seg *, caddr_t, size_t, int, uint_t);
223 221 static int segvn_clrszc(struct seg *);
224 222 static struct seg *segvn_split_seg(struct seg *, caddr_t);
225 223 static int segvn_claim_pages(struct seg *, struct vpage *, u_offset_t,
226 224 ulong_t, uint_t);
227 225
228 226 static void segvn_hat_rgn_unload_callback(caddr_t, caddr_t, caddr_t,
229 227 size_t, void *, u_offset_t);
230 228
231 229 static struct kmem_cache *segvn_cache;
232 230 static struct kmem_cache **segvn_szc_cache;
233 231
234 232 #ifdef VM_STATS
235 233 static struct segvnvmstats_str {
236 234 ulong_t fill_vp_pages[31];
237 235 ulong_t fltvnpages[49];
238 236 ulong_t fullszcpages[10];
239 237 ulong_t relocatepages[3];
240 238 ulong_t fltanpages[17];
241 239 ulong_t pagelock[2];
242 240 ulong_t demoterange[3];
243 241 } segvnvmstats;
244 242 #endif /* VM_STATS */
245 243
246 244 #define SDR_RANGE 1 /* demote entire range */
247 245 #define SDR_END 2 /* demote non aligned ends only */
248 246
249 247 #define CALC_LPG_REGION(pgsz, seg, addr, len, lpgaddr, lpgeaddr) { \
250 248 if ((len) != 0) { \
251 249 lpgaddr = (caddr_t)P2ALIGN((uintptr_t)(addr), pgsz); \
252 250 ASSERT(lpgaddr >= (seg)->s_base); \
253 251 lpgeaddr = (caddr_t)P2ROUNDUP((uintptr_t)((addr) + \
254 252 (len)), pgsz); \
255 253 ASSERT(lpgeaddr > lpgaddr); \
256 254 ASSERT(lpgeaddr <= (seg)->s_base + (seg)->s_size); \
257 255 } else { \
258 256 lpgeaddr = lpgaddr = (addr); \
259 257 } \
260 258 }
261 259
262 260 /*ARGSUSED*/
263 261 static int
264 262 segvn_cache_constructor(void *buf, void *cdrarg, int kmflags)
265 263 {
266 264 struct segvn_data *svd = buf;
267 265
268 266 rw_init(&svd->lock, NULL, RW_DEFAULT, NULL);
269 267 mutex_init(&svd->segfree_syncmtx, NULL, MUTEX_DEFAULT, NULL);
270 268 svd->svn_trnext = svd->svn_trprev = NULL;
271 269 return (0);
272 270 }
273 271
274 272 /*ARGSUSED1*/
275 273 static void
276 274 segvn_cache_destructor(void *buf, void *cdrarg)
277 275 {
278 276 struct segvn_data *svd = buf;
279 277
280 278 rw_destroy(&svd->lock);
281 279 mutex_destroy(&svd->segfree_syncmtx);
282 280 }
283 281
284 282 /*ARGSUSED*/
285 283 static int
286 284 svntr_cache_constructor(void *buf, void *cdrarg, int kmflags)
287 285 {
288 286 bzero(buf, sizeof (svntr_t));
289 287 return (0);
290 288 }
291 289
292 290 /*
293 291 * Patching this variable to non-zero allows the system to run with
294 292 * stacks marked as "not executable". It's a bit of a kludge, but is
295 293 * provided as a tweakable for platforms that export those ABIs
296 294 * (e.g. sparc V8) that have executable stacks enabled by default.
297 295 * There are also some restrictions for platforms that don't actually
298 296 * implement 'noexec' protections.
299 297 *
300 298 * Once enabled, the system is (therefore) unable to provide a fully
301 299 * ABI-compliant execution environment, though practically speaking,
302 300 * most everything works. The exceptions are generally some interpreters
303 301 * and debuggers that create executable code on the stack and jump
304 302 * into it (without explicitly mprotecting the address range to include
305 303 * PROT_EXEC).
306 304 *
307 305 * One important class of applications that are disabled are those
308 306 * that have been transformed into malicious agents using one of the
309 307 * numerous "buffer overflow" attacks. See 4007890.
310 308 */
311 309 int noexec_user_stack = 0;
312 310 int noexec_user_stack_log = 1;
313 311
314 312 int segvn_lpg_disable = 0;
315 313 uint_t segvn_maxpgszc = 0;
316 314
317 315 ulong_t segvn_vmpss_clrszc_cnt;
318 316 ulong_t segvn_vmpss_clrszc_err;
319 317 ulong_t segvn_fltvnpages_clrszc_cnt;
320 318 ulong_t segvn_fltvnpages_clrszc_err;
321 319 ulong_t segvn_setpgsz_align_err;
322 320 ulong_t segvn_setpgsz_anon_align_err;
323 321 ulong_t segvn_setpgsz_getattr_err;
324 322 ulong_t segvn_setpgsz_eof_err;
325 323 ulong_t segvn_faultvnmpss_align_err1;
326 324 ulong_t segvn_faultvnmpss_align_err2;
327 325 ulong_t segvn_faultvnmpss_align_err3;
328 326 ulong_t segvn_faultvnmpss_align_err4;
329 327 ulong_t segvn_faultvnmpss_align_err5;
330 328 ulong_t segvn_vmpss_pageio_deadlk_err;
331 329
332 330 int segvn_use_regions = 1;
333 331
334 332 /*
335 333 * Segvn supports text replication optimization for NUMA platforms. Text
336 334 * replica's are represented by anon maps (amp). There's one amp per text file
337 335 * region per lgroup. A process chooses the amp for each of its text mappings
338 336 * based on the lgroup assignment of its main thread (t_tid = 1). All
339 337 * processes that want a replica on a particular lgroup for the same text file
340 338 * mapping share the same amp. amp's are looked up in svntr_hashtab hash table
341 339 * with vp,off,size,szc used as a key. Text replication segments are read only
342 340 * MAP_PRIVATE|MAP_TEXT segments that map vnode. Replication is achieved by
343 341 * forcing COW faults from vnode to amp and mapping amp pages instead of vnode
344 342 * pages. Replication amp is assigned to a segment when it gets its first
345 343 * pagefault. To handle main thread lgroup rehoming segvn_trasync_thread
346 344 * rechecks periodically if the process still maps an amp local to the main
347 345 * thread. If not async thread forces process to remap to an amp in the new
348 346 * home lgroup of the main thread. Current text replication implementation
349 347 * only provides the benefit to workloads that do most of their work in the
350 348 * main thread of a process or all the threads of a process run in the same
351 349 * lgroup. To extend text replication benefit to different types of
352 350 * multithreaded workloads further work would be needed in the hat layer to
353 351 * allow the same virtual address in the same hat to simultaneously map
354 352 * different physical addresses (i.e. page table replication would be needed
355 353 * for x86).
356 354 *
357 355 * amp pages are used instead of vnode pages as long as segment has a very
358 356 * simple life cycle. It's created via segvn_create(), handles S_EXEC
359 357 * (S_READ) pagefaults and is fully unmapped. If anything more complicated
360 358 * happens such as protection is changed, real COW fault happens, pagesize is
361 359 * changed, MC_LOCK is requested or segment is partially unmapped we turn off
362 360 * text replication by converting the segment back to vnode only segment
363 361 * (unmap segment's address range and set svd->amp to NULL).
364 362 *
365 363 * The original file can be changed after amp is inserted into
366 364 * svntr_hashtab. Processes that are launched after the file is already
367 365 * changed can't use the replica's created prior to the file change. To
368 366 * implement this functionality hash entries are timestamped. Replica's can
369 367 * only be used if current file modification time is the same as the timestamp
370 368 * saved when hash entry was created. However just timestamps alone are not
371 369 * sufficient to detect file modification via mmap(MAP_SHARED) mappings. We
372 370 * deal with file changes via MAP_SHARED mappings differently. When writable
373 371 * MAP_SHARED mappings are created to vnodes marked as executable we mark all
374 372 * existing replica's for this vnode as not usable for future text
375 373 * mappings. And we don't create new replica's for files that currently have
376 374 * potentially writable MAP_SHARED mappings (i.e. vn_is_mapped(V_WRITE) is
377 375 * true).
378 376 */
379 377
380 378 #define SEGVN_TEXTREPL_MAXBYTES_FACTOR (20)
381 379 size_t segvn_textrepl_max_bytes_factor = SEGVN_TEXTREPL_MAXBYTES_FACTOR;
382 380
383 381 static ulong_t svntr_hashtab_sz = 512;
384 382 static svntr_bucket_t *svntr_hashtab = NULL;
385 383 static struct kmem_cache *svntr_cache;
386 384 static svntr_stats_t *segvn_textrepl_stats;
387 385 static ksema_t segvn_trasync_sem;
388 386
389 387 int segvn_disable_textrepl = 1;
390 388 size_t textrepl_size_thresh = (size_t)-1;
391 389 size_t segvn_textrepl_bytes = 0;
392 390 size_t segvn_textrepl_max_bytes = 0;
393 391 clock_t segvn_update_textrepl_interval = 0;
394 392 int segvn_update_tr_time = 10;
395 393 int segvn_disable_textrepl_update = 0;
396 394
397 395 static void segvn_textrepl(struct seg *);
398 396 static void segvn_textunrepl(struct seg *, int);
399 397 static void segvn_inval_trcache(vnode_t *);
400 398 static void segvn_trasync_thread(void);
401 399 static void segvn_trupdate_wakeup(void *);
402 400 static void segvn_trupdate(void);
403 401 static void segvn_trupdate_seg(struct seg *, segvn_data_t *, svntr_t *,
404 402 ulong_t);
405 403
406 404 /*
407 405 * Initialize segvn data structures
408 406 */
409 407 void
410 408 segvn_init(void)
411 409 {
412 410 uint_t maxszc;
413 411 uint_t szc;
414 412 size_t pgsz;
415 413
416 414 segvn_cache = kmem_cache_create("segvn_cache",
417 415 sizeof (struct segvn_data), 0,
418 416 segvn_cache_constructor, segvn_cache_destructor, NULL,
419 417 NULL, NULL, 0);
420 418
421 419 if (segvn_lpg_disable == 0) {
422 420 szc = maxszc = page_num_pagesizes() - 1;
423 421 if (szc == 0) {
424 422 segvn_lpg_disable = 1;
425 423 }
426 424 if (page_get_pagesize(0) != PAGESIZE) {
427 425 panic("segvn_init: bad szc 0");
428 426 /*NOTREACHED*/
429 427 }
430 428 while (szc != 0) {
431 429 pgsz = page_get_pagesize(szc);
432 430 if (pgsz <= PAGESIZE || !IS_P2ALIGNED(pgsz, pgsz)) {
433 431 panic("segvn_init: bad szc %d", szc);
434 432 /*NOTREACHED*/
435 433 }
436 434 szc--;
437 435 }
438 436 if (segvn_maxpgszc == 0 || segvn_maxpgszc > maxszc)
439 437 segvn_maxpgszc = maxszc;
440 438 }
441 439
442 440 if (segvn_maxpgszc) {
443 441 segvn_szc_cache = (struct kmem_cache **)kmem_alloc(
444 442 (segvn_maxpgszc + 1) * sizeof (struct kmem_cache *),
445 443 KM_SLEEP);
446 444 }
447 445
448 446 for (szc = 1; szc <= segvn_maxpgszc; szc++) {
449 447 char str[32];
450 448
451 449 (void) sprintf(str, "segvn_szc_cache%d", szc);
452 450 segvn_szc_cache[szc] = kmem_cache_create(str,
453 451 page_get_pagecnt(szc) * sizeof (page_t *), 0,
454 452 NULL, NULL, NULL, NULL, NULL, KMC_NODEBUG);
455 453 }
456 454
457 455
458 456 if (segvn_use_regions && !hat_supported(HAT_SHARED_REGIONS, NULL))
459 457 segvn_use_regions = 0;
460 458
461 459 /*
462 460 * For now shared regions and text replication segvn support
463 461 * are mutually exclusive. This is acceptable because
464 462 * currently significant benefit from text replication was
465 463 * only observed on AMD64 NUMA platforms (due to relatively
466 464 * small L2$ size) and currently we don't support shared
467 465 * regions on x86.
468 466 */
469 467 if (segvn_use_regions && !segvn_disable_textrepl) {
470 468 segvn_disable_textrepl = 1;
471 469 }
472 470
473 471 #if defined(_LP64)
474 472 if (lgrp_optimizations() && textrepl_size_thresh != (size_t)-1 &&
475 473 !segvn_disable_textrepl) {
476 474 ulong_t i;
477 475 size_t hsz = svntr_hashtab_sz * sizeof (svntr_bucket_t);
478 476
479 477 svntr_cache = kmem_cache_create("svntr_cache",
480 478 sizeof (svntr_t), 0, svntr_cache_constructor, NULL,
481 479 NULL, NULL, NULL, 0);
482 480 svntr_hashtab = kmem_zalloc(hsz, KM_SLEEP);
483 481 for (i = 0; i < svntr_hashtab_sz; i++) {
484 482 mutex_init(&svntr_hashtab[i].tr_lock, NULL,
485 483 MUTEX_DEFAULT, NULL);
486 484 }
487 485 segvn_textrepl_max_bytes = ptob(physmem) /
488 486 segvn_textrepl_max_bytes_factor;
489 487 segvn_textrepl_stats = kmem_zalloc(NCPU *
490 488 sizeof (svntr_stats_t), KM_SLEEP);
491 489 sema_init(&segvn_trasync_sem, 0, NULL, SEMA_DEFAULT, NULL);
492 490 (void) thread_create(NULL, 0, segvn_trasync_thread,
493 491 NULL, 0, &p0, TS_RUN, minclsyspri);
494 492 }
495 493 #endif
496 494
497 495 if (!ISP2(segvn_pglock_comb_balign) ||
498 496 segvn_pglock_comb_balign < PAGESIZE) {
499 497 segvn_pglock_comb_balign = 1UL << 16; /* 64K */
500 498 }
501 499 segvn_pglock_comb_bshift = highbit(segvn_pglock_comb_balign) - 1;
502 500 segvn_pglock_comb_palign = btop(segvn_pglock_comb_balign);
503 501 }
504 502
505 503 #define SEGVN_PAGEIO ((void *)0x1)
506 504 #define SEGVN_NOPAGEIO ((void *)0x2)
507 505
508 506 static void
509 507 segvn_setvnode_mpss(vnode_t *vp)
510 508 {
511 509 int err;
512 510
513 511 ASSERT(vp->v_mpssdata == NULL ||
514 512 vp->v_mpssdata == SEGVN_PAGEIO ||
515 513 vp->v_mpssdata == SEGVN_NOPAGEIO);
516 514
517 515 if (vp->v_mpssdata == NULL) {
518 516 if (vn_vmpss_usepageio(vp)) {
519 517 err = VOP_PAGEIO(vp, (page_t *)NULL,
520 518 (u_offset_t)0, 0, 0, CRED(), NULL);
521 519 } else {
522 520 err = ENOSYS;
523 521 }
524 522 /*
525 523 * set v_mpssdata just once per vnode life
526 524 * so that it never changes.
527 525 */
528 526 mutex_enter(&vp->v_lock);
529 527 if (vp->v_mpssdata == NULL) {
530 528 if (err == EINVAL) {
531 529 vp->v_mpssdata = SEGVN_PAGEIO;
532 530 } else {
533 531 vp->v_mpssdata = SEGVN_NOPAGEIO;
534 532 }
535 533 }
536 534 mutex_exit(&vp->v_lock);
537 535 }
538 536 }
539 537
540 538 int
541 539 segvn_create(struct seg *seg, void *argsp)
542 540 {
543 541 struct segvn_crargs *a = (struct segvn_crargs *)argsp;
544 542 struct segvn_data *svd;
545 543 size_t swresv = 0;
546 544 struct cred *cred;
547 545 struct anon_map *amp;
548 546 int error = 0;
549 547 size_t pgsz;
550 548 lgrp_mem_policy_t mpolicy = LGRP_MEM_POLICY_DEFAULT;
551 549 int use_rgn = 0;
552 550 int trok = 0;
553 551
554 552 ASSERT(seg->s_as && AS_WRITE_HELD(seg->s_as));
555 553
556 554 if (a->type != MAP_PRIVATE && a->type != MAP_SHARED) {
557 555 panic("segvn_create type");
558 556 /*NOTREACHED*/
559 557 }
560 558
561 559 /*
562 560 * Check arguments. If a shared anon structure is given then
563 561 * it is illegal to also specify a vp.
564 562 */
565 563 if (a->amp != NULL && a->vp != NULL) {
566 564 panic("segvn_create anon_map");
567 565 /*NOTREACHED*/
568 566 }
569 567
570 568 if (a->type == MAP_PRIVATE && (a->flags & MAP_TEXT) &&
571 569 a->vp != NULL && a->prot == (PROT_USER | PROT_READ | PROT_EXEC) &&
572 570 segvn_use_regions) {
573 571 use_rgn = 1;
574 572 }
575 573
576 574 /* MAP_NORESERVE on a MAP_SHARED segment is meaningless. */
577 575 if (a->type == MAP_SHARED)
578 576 a->flags &= ~MAP_NORESERVE;
579 577
580 578 if (a->szc != 0) {
581 579 if (segvn_lpg_disable != 0 || (a->szc == AS_MAP_NO_LPOOB) ||
582 580 (a->amp != NULL && a->type == MAP_PRIVATE) ||
583 581 (a->flags & MAP_NORESERVE) || seg->s_as == &kas) {
584 582 a->szc = 0;
585 583 } else {
586 584 if (a->szc > segvn_maxpgszc)
587 585 a->szc = segvn_maxpgszc;
588 586 pgsz = page_get_pagesize(a->szc);
589 587 if (!IS_P2ALIGNED(seg->s_base, pgsz) ||
590 588 !IS_P2ALIGNED(seg->s_size, pgsz)) {
591 589 a->szc = 0;
592 590 } else if (a->vp != NULL) {
593 591 if (IS_SWAPFSVP(a->vp) || VN_ISKAS(a->vp)) {
594 592 /*
595 593 * paranoid check.
596 594 * hat_page_demote() is not supported
597 595 * on swapfs pages.
598 596 */
599 597 a->szc = 0;
600 598 } else if (map_addr_vacalign_check(seg->s_base,
601 599 a->offset & PAGEMASK)) {
602 600 a->szc = 0;
603 601 }
604 602 } else if (a->amp != NULL) {
605 603 pgcnt_t anum = btopr(a->offset);
606 604 pgcnt_t pgcnt = page_get_pagecnt(a->szc);
607 605 if (!IS_P2ALIGNED(anum, pgcnt)) {
608 606 a->szc = 0;
609 607 }
610 608 }
611 609 }
612 610 }
613 611
614 612 /*
615 613 * If segment may need private pages, reserve them now.
616 614 */
617 615 if (!(a->flags & MAP_NORESERVE) && ((a->vp == NULL && a->amp == NULL) ||
618 616 (a->type == MAP_PRIVATE && (a->prot & PROT_WRITE)))) {
619 617 if (anon_resv_zone(seg->s_size,
620 618 seg->s_as->a_proc->p_zone) == 0)
621 619 return (EAGAIN);
622 620 swresv = seg->s_size;
623 621 TRACE_3(TR_FAC_VM, TR_ANON_PROC, "anon proc:%p %lu %u",
624 622 seg, swresv, 1);
625 623 }
626 624
627 625 /*
628 626 * Reserve any mapping structures that may be required.
629 627 *
630 628 * Don't do it for segments that may use regions. It's currently a
631 629 * noop in the hat implementations anyway.
632 630 */
633 631 if (!use_rgn) {
634 632 hat_map(seg->s_as->a_hat, seg->s_base, seg->s_size, HAT_MAP);
635 633 }
636 634
637 635 if (a->cred) {
638 636 cred = a->cred;
639 637 crhold(cred);
640 638 } else {
641 639 crhold(cred = CRED());
642 640 }
643 641
644 642 /* Inform the vnode of the new mapping */
645 643 if (a->vp != NULL) {
646 644 error = VOP_ADDMAP(a->vp, a->offset & PAGEMASK,
647 645 seg->s_as, seg->s_base, seg->s_size, a->prot,
648 646 a->maxprot, a->type, cred, NULL);
649 647 if (error) {
650 648 if (swresv != 0) {
651 649 anon_unresv_zone(swresv,
652 650 seg->s_as->a_proc->p_zone);
653 651 TRACE_3(TR_FAC_VM, TR_ANON_PROC,
654 652 "anon proc:%p %lu %u", seg, swresv, 0);
655 653 }
656 654 crfree(cred);
657 655 if (!use_rgn) {
658 656 hat_unload(seg->s_as->a_hat, seg->s_base,
659 657 seg->s_size, HAT_UNLOAD_UNMAP);
660 658 }
661 659 return (error);
662 660 }
663 661 /*
664 662 * svntr_hashtab will be NULL if we support shared regions.
665 663 */
666 664 trok = ((a->flags & MAP_TEXT) &&
667 665 (seg->s_size > textrepl_size_thresh ||
668 666 (a->flags & _MAP_TEXTREPL)) &&
669 667 lgrp_optimizations() && svntr_hashtab != NULL &&
670 668 a->type == MAP_PRIVATE && swresv == 0 &&
671 669 !(a->flags & MAP_NORESERVE) &&
672 670 seg->s_as != &kas && a->vp->v_type == VREG);
673 671
674 672 ASSERT(!trok || !use_rgn);
675 673 }
676 674
677 675 /*
678 676 * MAP_NORESERVE mappings don't count towards the VSZ of a process
679 677 * until we fault the pages in.
680 678 */
681 679 if ((a->vp == NULL || a->vp->v_type != VREG) &&
682 680 a->flags & MAP_NORESERVE) {
683 681 seg->s_as->a_resvsize -= seg->s_size;
684 682 }
685 683
686 684 /*
687 685 * If more than one segment in the address space, and they're adjacent
688 686 * virtually, try to concatenate them. Don't concatenate if an
689 687 * explicit anon_map structure was supplied (e.g., SystemV shared
690 688 * memory) or if we'll use text replication for this segment.
691 689 */
692 690 if (a->amp == NULL && !use_rgn && !trok) {
693 691 struct seg *pseg, *nseg;
694 692 struct segvn_data *psvd, *nsvd;
695 693 lgrp_mem_policy_t ppolicy, npolicy;
696 694 uint_t lgrp_mem_policy_flags = 0;
697 695 extern lgrp_mem_policy_t lgrp_mem_default_policy;
698 696
699 697 /*
700 698 * Memory policy flags (lgrp_mem_policy_flags) is valid when
701 699 * extending stack/heap segments.
702 700 */
703 701 if ((a->vp == NULL) && (a->type == MAP_PRIVATE) &&
704 702 !(a->flags & MAP_NORESERVE) && (seg->s_as != &kas)) {
705 703 lgrp_mem_policy_flags = a->lgrp_mem_policy_flags;
706 704 } else {
707 705 /*
708 706 * Get policy when not extending it from another segment
709 707 */
710 708 mpolicy = lgrp_mem_policy_default(seg->s_size, a->type);
711 709 }
712 710
713 711 /*
714 712 * First, try to concatenate the previous and new segments
715 713 */
716 714 pseg = AS_SEGPREV(seg->s_as, seg);
717 715 if (pseg != NULL &&
718 716 pseg->s_base + pseg->s_size == seg->s_base &&
719 717 pseg->s_ops == &segvn_ops) {
720 718 /*
721 719 * Get memory allocation policy from previous segment.
722 720 * When extension is specified (e.g. for heap) apply
723 721 * this policy to the new segment regardless of the
724 722 * outcome of segment concatenation. Extension occurs
725 723 * for non-default policy otherwise default policy is
726 724 * used and is based on extended segment size.
727 725 */
728 726 psvd = (struct segvn_data *)pseg->s_data;
729 727 ppolicy = psvd->policy_info.mem_policy;
730 728 if (lgrp_mem_policy_flags ==
731 729 LGRP_MP_FLAG_EXTEND_UP) {
732 730 if (ppolicy != lgrp_mem_default_policy) {
733 731 mpolicy = ppolicy;
734 732 } else {
735 733 mpolicy = lgrp_mem_policy_default(
736 734 pseg->s_size + seg->s_size,
737 735 a->type);
738 736 }
739 737 }
740 738
741 739 if (mpolicy == ppolicy &&
742 740 (pseg->s_size + seg->s_size <=
743 741 segvn_comb_thrshld || psvd->amp == NULL) &&
744 742 segvn_extend_prev(pseg, seg, a, swresv) == 0) {
745 743 /*
746 744 * success! now try to concatenate
747 745 * with following seg
748 746 */
749 747 crfree(cred);
750 748 nseg = AS_SEGNEXT(pseg->s_as, pseg);
751 749 if (nseg != NULL &&
752 750 nseg != pseg &&
753 751 nseg->s_ops == &segvn_ops &&
754 752 pseg->s_base + pseg->s_size ==
755 753 nseg->s_base)
756 754 (void) segvn_concat(pseg, nseg, 0);
757 755 ASSERT(pseg->s_szc == 0 ||
758 756 (a->szc == pseg->s_szc &&
759 757 IS_P2ALIGNED(pseg->s_base, pgsz) &&
760 758 IS_P2ALIGNED(pseg->s_size, pgsz)));
761 759 return (0);
762 760 }
763 761 }
764 762
765 763 /*
766 764 * Failed, so try to concatenate with following seg
767 765 */
768 766 nseg = AS_SEGNEXT(seg->s_as, seg);
769 767 if (nseg != NULL &&
770 768 seg->s_base + seg->s_size == nseg->s_base &&
771 769 nseg->s_ops == &segvn_ops) {
772 770 /*
773 771 * Get memory allocation policy from next segment.
774 772 * When extension is specified (e.g. for stack) apply
775 773 * this policy to the new segment regardless of the
776 774 * outcome of segment concatenation. Extension occurs
777 775 * for non-default policy otherwise default policy is
778 776 * used and is based on extended segment size.
779 777 */
780 778 nsvd = (struct segvn_data *)nseg->s_data;
781 779 npolicy = nsvd->policy_info.mem_policy;
782 780 if (lgrp_mem_policy_flags ==
783 781 LGRP_MP_FLAG_EXTEND_DOWN) {
784 782 if (npolicy != lgrp_mem_default_policy) {
785 783 mpolicy = npolicy;
786 784 } else {
787 785 mpolicy = lgrp_mem_policy_default(
788 786 nseg->s_size + seg->s_size,
789 787 a->type);
790 788 }
791 789 }
792 790
793 791 if (mpolicy == npolicy &&
794 792 segvn_extend_next(seg, nseg, a, swresv) == 0) {
795 793 crfree(cred);
796 794 ASSERT(nseg->s_szc == 0 ||
797 795 (a->szc == nseg->s_szc &&
798 796 IS_P2ALIGNED(nseg->s_base, pgsz) &&
799 797 IS_P2ALIGNED(nseg->s_size, pgsz)));
800 798 return (0);
801 799 }
802 800 }
803 801 }
804 802
805 803 if (a->vp != NULL) {
806 804 VN_HOLD(a->vp);
807 805 if (a->type == MAP_SHARED)
808 806 lgrp_shm_policy_init(NULL, a->vp);
809 807 }
810 808 svd = kmem_cache_alloc(segvn_cache, KM_SLEEP);
811 809
812 810 seg->s_ops = &segvn_ops;
813 811 seg->s_data = (void *)svd;
814 812 seg->s_szc = a->szc;
815 813
816 814 svd->seg = seg;
817 815 svd->vp = a->vp;
818 816 /*
819 817 * Anonymous mappings have no backing file so the offset is meaningless.
820 818 */
821 819 svd->offset = a->vp ? (a->offset & PAGEMASK) : 0;
822 820 svd->prot = a->prot;
823 821 svd->maxprot = a->maxprot;
824 822 svd->pageprot = 0;
825 823 svd->type = a->type;
826 824 svd->vpage = NULL;
827 825 svd->cred = cred;
828 826 svd->advice = MADV_NORMAL;
829 827 svd->pageadvice = 0;
830 828 svd->flags = (ushort_t)a->flags;
831 829 svd->softlockcnt = 0;
832 830 svd->softlockcnt_sbase = 0;
833 831 svd->softlockcnt_send = 0;
834 832 svd->svn_inz = 0;
835 833 svd->rcookie = HAT_INVALID_REGION_COOKIE;
836 834 svd->pageswap = 0;
837 835
838 836 if (a->szc != 0 && a->vp != NULL) {
839 837 segvn_setvnode_mpss(a->vp);
840 838 }
841 839 if (svd->type == MAP_SHARED && svd->vp != NULL &&
842 840 (svd->vp->v_flag & VVMEXEC) && (svd->prot & PROT_WRITE)) {
843 841 ASSERT(vn_is_mapped(svd->vp, V_WRITE));
844 842 segvn_inval_trcache(svd->vp);
845 843 }
846 844
847 845 amp = a->amp;
848 846 if ((svd->amp = amp) == NULL) {
849 847 svd->anon_index = 0;
850 848 if (svd->type == MAP_SHARED) {
851 849 svd->swresv = 0;
852 850 /*
853 851 * Shared mappings to a vp need no other setup.
854 852 * If we have a shared mapping to an anon_map object
855 853 * which hasn't been allocated yet, allocate the
856 854 * struct now so that it will be properly shared
857 855 * by remembering the swap reservation there.
858 856 */
859 857 if (a->vp == NULL) {
860 858 svd->amp = anonmap_alloc(seg->s_size, swresv,
861 859 ANON_SLEEP);
862 860 svd->amp->a_szc = seg->s_szc;
863 861 }
864 862 } else {
865 863 /*
866 864 * Private mapping (with or without a vp).
867 865 * Allocate anon_map when needed.
868 866 */
869 867 svd->swresv = swresv;
870 868 }
871 869 } else {
872 870 pgcnt_t anon_num;
873 871
874 872 /*
875 873 * Mapping to an existing anon_map structure without a vp.
876 874 * For now we will insure that the segment size isn't larger
877 875 * than the size - offset gives us. Later on we may wish to
878 876 * have the anon array dynamically allocated itself so that
879 877 * we don't always have to allocate all the anon pointer slots.
880 878 * This of course involves adding extra code to check that we
881 879 * aren't trying to use an anon pointer slot beyond the end
882 880 * of the currently allocated anon array.
883 881 */
884 882 if ((amp->size - a->offset) < seg->s_size) {
885 883 panic("segvn_create anon_map size");
886 884 /*NOTREACHED*/
887 885 }
888 886
889 887 anon_num = btopr(a->offset);
890 888
891 889 if (a->type == MAP_SHARED) {
892 890 /*
893 891 * SHARED mapping to a given anon_map.
894 892 */
895 893 ANON_LOCK_ENTER(&->a_rwlock, RW_WRITER);
896 894 amp->refcnt++;
897 895 if (a->szc > amp->a_szc) {
898 896 amp->a_szc = a->szc;
899 897 }
900 898 ANON_LOCK_EXIT(&->a_rwlock);
901 899 svd->anon_index = anon_num;
902 900 svd->swresv = 0;
903 901 } else {
904 902 /*
905 903 * PRIVATE mapping to a given anon_map.
906 904 * Make sure that all the needed anon
907 905 * structures are created (so that we will
908 906 * share the underlying pages if nothing
909 907 * is written by this mapping) and then
910 908 * duplicate the anon array as is done
911 909 * when a privately mapped segment is dup'ed.
912 910 */
913 911 struct anon *ap;
914 912 caddr_t addr;
915 913 caddr_t eaddr;
916 914 ulong_t anon_idx;
917 915 int hat_flag = HAT_LOAD;
918 916
919 917 if (svd->flags & MAP_TEXT) {
920 918 hat_flag |= HAT_LOAD_TEXT;
921 919 }
922 920
923 921 svd->amp = anonmap_alloc(seg->s_size, 0, ANON_SLEEP);
924 922 svd->amp->a_szc = seg->s_szc;
925 923 svd->anon_index = 0;
926 924 svd->swresv = swresv;
927 925
928 926 /*
929 927 * Prevent 2 threads from allocating anon
930 928 * slots simultaneously.
931 929 */
932 930 ANON_LOCK_ENTER(&->a_rwlock, RW_WRITER);
933 931 eaddr = seg->s_base + seg->s_size;
934 932
935 933 for (anon_idx = anon_num, addr = seg->s_base;
936 934 addr < eaddr; addr += PAGESIZE, anon_idx++) {
937 935 page_t *pp;
938 936
939 937 if ((ap = anon_get_ptr(amp->ahp,
940 938 anon_idx)) != NULL)
941 939 continue;
942 940
943 941 /*
944 942 * Allocate the anon struct now.
945 943 * Might as well load up translation
946 944 * to the page while we're at it...
947 945 */
948 946 pp = anon_zero(seg, addr, &ap, cred);
949 947 if (ap == NULL || pp == NULL) {
950 948 panic("segvn_create anon_zero");
951 949 /*NOTREACHED*/
952 950 }
953 951
954 952 /*
955 953 * Re-acquire the anon_map lock and
956 954 * initialize the anon array entry.
957 955 */
958 956 ASSERT(anon_get_ptr(amp->ahp,
959 957 anon_idx) == NULL);
960 958 (void) anon_set_ptr(amp->ahp, anon_idx, ap,
961 959 ANON_SLEEP);
962 960
963 961 ASSERT(seg->s_szc == 0);
964 962 ASSERT(!IS_VMODSORT(pp->p_vnode));
965 963
966 964 ASSERT(use_rgn == 0);
967 965 hat_memload(seg->s_as->a_hat, addr, pp,
968 966 svd->prot & ~PROT_WRITE, hat_flag);
969 967
970 968 page_unlock(pp);
971 969 }
972 970 ASSERT(seg->s_szc == 0);
973 971 anon_dup(amp->ahp, anon_num, svd->amp->ahp,
974 972 0, seg->s_size);
975 973 ANON_LOCK_EXIT(&->a_rwlock);
976 974 }
977 975 }
978 976
979 977 /*
980 978 * Set default memory allocation policy for segment
981 979 *
982 980 * Always set policy for private memory at least for initialization
983 981 * even if this is a shared memory segment
984 982 */
985 983 (void) lgrp_privm_policy_set(mpolicy, &svd->policy_info, seg->s_size);
986 984
987 985 if (svd->type == MAP_SHARED)
988 986 (void) lgrp_shm_policy_set(mpolicy, svd->amp, svd->anon_index,
989 987 svd->vp, svd->offset, seg->s_size);
990 988
991 989 if (use_rgn) {
992 990 ASSERT(!trok);
993 991 ASSERT(svd->amp == NULL);
994 992 svd->rcookie = hat_join_region(seg->s_as->a_hat, seg->s_base,
995 993 seg->s_size, (void *)svd->vp, svd->offset, svd->prot,
996 994 (uchar_t)seg->s_szc, segvn_hat_rgn_unload_callback,
997 995 HAT_REGION_TEXT);
998 996 }
999 997
1000 998 ASSERT(!trok || !(svd->prot & PROT_WRITE));
1001 999 svd->tr_state = trok ? SEGVN_TR_INIT : SEGVN_TR_OFF;
1002 1000
1003 1001 return (0);
1004 1002 }
1005 1003
1006 1004 /*
1007 1005 * Concatenate two existing segments, if possible.
1008 1006 * Return 0 on success, -1 if two segments are not compatible
1009 1007 * or -2 on memory allocation failure.
1010 1008 * If amp_cat == 1 then try and concat segments with anon maps
1011 1009 */
1012 1010 static int
1013 1011 segvn_concat(struct seg *seg1, struct seg *seg2, int amp_cat)
1014 1012 {
1015 1013 struct segvn_data *svd1 = seg1->s_data;
1016 1014 struct segvn_data *svd2 = seg2->s_data;
1017 1015 struct anon_map *amp1 = svd1->amp;
1018 1016 struct anon_map *amp2 = svd2->amp;
1019 1017 struct vpage *vpage1 = svd1->vpage;
1020 1018 struct vpage *vpage2 = svd2->vpage, *nvpage = NULL;
1021 1019 size_t size, nvpsize;
1022 1020 pgcnt_t npages1, npages2;
1023 1021
1024 1022 ASSERT(seg1->s_as && seg2->s_as && seg1->s_as == seg2->s_as);
1025 1023 ASSERT(AS_WRITE_HELD(seg1->s_as));
1026 1024 ASSERT(seg1->s_ops == seg2->s_ops);
1027 1025
1028 1026 if (HAT_IS_REGION_COOKIE_VALID(svd1->rcookie) ||
1029 1027 HAT_IS_REGION_COOKIE_VALID(svd2->rcookie)) {
1030 1028 return (-1);
1031 1029 }
1032 1030
1033 1031 /* both segments exist, try to merge them */
1034 1032 #define incompat(x) (svd1->x != svd2->x)
1035 1033 if (incompat(vp) || incompat(maxprot) ||
1036 1034 (!svd1->pageadvice && !svd2->pageadvice && incompat(advice)) ||
1037 1035 (!svd1->pageprot && !svd2->pageprot && incompat(prot)) ||
1038 1036 incompat(type) || incompat(cred) || incompat(flags) ||
1039 1037 seg1->s_szc != seg2->s_szc || incompat(policy_info.mem_policy) ||
1040 1038 (svd2->softlockcnt > 0) || svd1->softlockcnt_send > 0)
1041 1039 return (-1);
1042 1040 #undef incompat
1043 1041
1044 1042 /*
1045 1043 * vp == NULL implies zfod, offset doesn't matter
1046 1044 */
1047 1045 if (svd1->vp != NULL &&
1048 1046 svd1->offset + seg1->s_size != svd2->offset) {
1049 1047 return (-1);
1050 1048 }
1051 1049
1052 1050 /*
1053 1051 * Don't concatenate if either segment uses text replication.
1054 1052 */
1055 1053 if (svd1->tr_state != SEGVN_TR_OFF || svd2->tr_state != SEGVN_TR_OFF) {
1056 1054 return (-1);
1057 1055 }
1058 1056
1059 1057 /*
1060 1058 * Fail early if we're not supposed to concatenate
1061 1059 * segments with non NULL amp.
1062 1060 */
1063 1061 if (amp_cat == 0 && (amp1 != NULL || amp2 != NULL)) {
1064 1062 return (-1);
1065 1063 }
1066 1064
1067 1065 if (svd1->vp == NULL && svd1->type == MAP_SHARED) {
1068 1066 if (amp1 != amp2) {
1069 1067 return (-1);
1070 1068 }
1071 1069 if (amp1 != NULL && svd1->anon_index + btop(seg1->s_size) !=
1072 1070 svd2->anon_index) {
1073 1071 return (-1);
1074 1072 }
1075 1073 ASSERT(amp1 == NULL || amp1->refcnt >= 2);
1076 1074 }
1077 1075
1078 1076 /*
1079 1077 * If either seg has vpages, create a new merged vpage array.
1080 1078 */
1081 1079 if (vpage1 != NULL || vpage2 != NULL) {
1082 1080 struct vpage *vp, *evp;
1083 1081
1084 1082 npages1 = seg_pages(seg1);
1085 1083 npages2 = seg_pages(seg2);
1086 1084 nvpsize = vpgtob(npages1 + npages2);
1087 1085
1088 1086 if ((nvpage = kmem_zalloc(nvpsize, KM_NOSLEEP)) == NULL) {
1089 1087 return (-2);
1090 1088 }
1091 1089
1092 1090 if (vpage1 != NULL) {
1093 1091 bcopy(vpage1, nvpage, vpgtob(npages1));
1094 1092 } else {
1095 1093 evp = nvpage + npages1;
1096 1094 for (vp = nvpage; vp < evp; vp++) {
1097 1095 VPP_SETPROT(vp, svd1->prot);
1098 1096 VPP_SETADVICE(vp, svd1->advice);
1099 1097 }
1100 1098 }
1101 1099
1102 1100 if (vpage2 != NULL) {
1103 1101 bcopy(vpage2, nvpage + npages1, vpgtob(npages2));
1104 1102 } else {
1105 1103 evp = nvpage + npages1 + npages2;
1106 1104 for (vp = nvpage + npages1; vp < evp; vp++) {
1107 1105 VPP_SETPROT(vp, svd2->prot);
1108 1106 VPP_SETADVICE(vp, svd2->advice);
1109 1107 }
1110 1108 }
1111 1109
1112 1110 if (svd2->pageswap && (!svd1->pageswap && svd1->swresv)) {
1113 1111 ASSERT(svd1->swresv == seg1->s_size);
1114 1112 ASSERT(!(svd1->flags & MAP_NORESERVE));
1115 1113 ASSERT(!(svd2->flags & MAP_NORESERVE));
1116 1114 evp = nvpage + npages1;
1117 1115 for (vp = nvpage; vp < evp; vp++) {
1118 1116 VPP_SETSWAPRES(vp);
1119 1117 }
1120 1118 }
1121 1119
1122 1120 if (svd1->pageswap && (!svd2->pageswap && svd2->swresv)) {
1123 1121 ASSERT(svd2->swresv == seg2->s_size);
1124 1122 ASSERT(!(svd1->flags & MAP_NORESERVE));
1125 1123 ASSERT(!(svd2->flags & MAP_NORESERVE));
1126 1124 vp = nvpage + npages1;
1127 1125 evp = vp + npages2;
1128 1126 for (; vp < evp; vp++) {
1129 1127 VPP_SETSWAPRES(vp);
1130 1128 }
1131 1129 }
1132 1130 }
1133 1131 ASSERT((vpage1 != NULL || vpage2 != NULL) ||
1134 1132 (svd1->pageswap == 0 && svd2->pageswap == 0));
1135 1133
1136 1134 /*
1137 1135 * If either segment has private pages, create a new merged anon
1138 1136 * array. If mergeing shared anon segments just decrement anon map's
1139 1137 * refcnt.
1140 1138 */
1141 1139 if (amp1 != NULL && svd1->type == MAP_SHARED) {
1142 1140 ASSERT(amp1 == amp2 && svd1->vp == NULL);
1143 1141 ANON_LOCK_ENTER(&1->a_rwlock, RW_WRITER);
1144 1142 ASSERT(amp1->refcnt >= 2);
1145 1143 amp1->refcnt--;
1146 1144 ANON_LOCK_EXIT(&1->a_rwlock);
1147 1145 svd2->amp = NULL;
1148 1146 } else if (amp1 != NULL || amp2 != NULL) {
1149 1147 struct anon_hdr *nahp;
1150 1148 struct anon_map *namp = NULL;
1151 1149 size_t asize;
1152 1150
1153 1151 ASSERT(svd1->type == MAP_PRIVATE);
1154 1152
1155 1153 asize = seg1->s_size + seg2->s_size;
1156 1154 if ((nahp = anon_create(btop(asize), ANON_NOSLEEP)) == NULL) {
1157 1155 if (nvpage != NULL) {
1158 1156 kmem_free(nvpage, nvpsize);
1159 1157 }
1160 1158 return (-2);
1161 1159 }
1162 1160 if (amp1 != NULL) {
1163 1161 /*
1164 1162 * XXX anon rwlock is not really needed because
1165 1163 * this is a private segment and we are writers.
1166 1164 */
1167 1165 ANON_LOCK_ENTER(&1->a_rwlock, RW_WRITER);
1168 1166 ASSERT(amp1->refcnt == 1);
1169 1167 if (anon_copy_ptr(amp1->ahp, svd1->anon_index,
1170 1168 nahp, 0, btop(seg1->s_size), ANON_NOSLEEP)) {
1171 1169 anon_release(nahp, btop(asize));
1172 1170 ANON_LOCK_EXIT(&1->a_rwlock);
1173 1171 if (nvpage != NULL) {
1174 1172 kmem_free(nvpage, nvpsize);
1175 1173 }
1176 1174 return (-2);
1177 1175 }
1178 1176 }
1179 1177 if (amp2 != NULL) {
1180 1178 ANON_LOCK_ENTER(&2->a_rwlock, RW_WRITER);
1181 1179 ASSERT(amp2->refcnt == 1);
1182 1180 if (anon_copy_ptr(amp2->ahp, svd2->anon_index,
1183 1181 nahp, btop(seg1->s_size), btop(seg2->s_size),
1184 1182 ANON_NOSLEEP)) {
1185 1183 anon_release(nahp, btop(asize));
1186 1184 ANON_LOCK_EXIT(&2->a_rwlock);
1187 1185 if (amp1 != NULL) {
1188 1186 ANON_LOCK_EXIT(&1->a_rwlock);
1189 1187 }
1190 1188 if (nvpage != NULL) {
1191 1189 kmem_free(nvpage, nvpsize);
1192 1190 }
1193 1191 return (-2);
1194 1192 }
1195 1193 }
1196 1194 if (amp1 != NULL) {
1197 1195 namp = amp1;
1198 1196 anon_release(amp1->ahp, btop(amp1->size));
1199 1197 }
1200 1198 if (amp2 != NULL) {
1201 1199 if (namp == NULL) {
1202 1200 ASSERT(amp1 == NULL);
1203 1201 namp = amp2;
1204 1202 anon_release(amp2->ahp, btop(amp2->size));
1205 1203 } else {
1206 1204 amp2->refcnt--;
1207 1205 ANON_LOCK_EXIT(&2->a_rwlock);
1208 1206 anonmap_free(amp2);
1209 1207 }
1210 1208 svd2->amp = NULL; /* needed for seg_free */
1211 1209 }
1212 1210 namp->ahp = nahp;
1213 1211 namp->size = asize;
1214 1212 svd1->amp = namp;
1215 1213 svd1->anon_index = 0;
1216 1214 ANON_LOCK_EXIT(&namp->a_rwlock);
1217 1215 }
1218 1216 /*
1219 1217 * Now free the old vpage structures.
1220 1218 */
1221 1219 if (nvpage != NULL) {
1222 1220 if (vpage1 != NULL) {
1223 1221 kmem_free(vpage1, vpgtob(npages1));
1224 1222 }
1225 1223 if (vpage2 != NULL) {
1226 1224 svd2->vpage = NULL;
1227 1225 kmem_free(vpage2, vpgtob(npages2));
1228 1226 }
1229 1227 if (svd2->pageprot) {
1230 1228 svd1->pageprot = 1;
1231 1229 }
1232 1230 if (svd2->pageadvice) {
1233 1231 svd1->pageadvice = 1;
1234 1232 }
1235 1233 if (svd2->pageswap) {
1236 1234 svd1->pageswap = 1;
1237 1235 }
1238 1236 svd1->vpage = nvpage;
1239 1237 }
1240 1238
1241 1239 /* all looks ok, merge segments */
1242 1240 svd1->swresv += svd2->swresv;
1243 1241 svd2->swresv = 0; /* so seg_free doesn't release swap space */
1244 1242 size = seg2->s_size;
1245 1243 seg_free(seg2);
1246 1244 seg1->s_size += size;
1247 1245 return (0);
1248 1246 }
1249 1247
1250 1248 /*
1251 1249 * Extend the previous segment (seg1) to include the
1252 1250 * new segment (seg2 + a), if possible.
1253 1251 * Return 0 on success.
1254 1252 */
1255 1253 static int
1256 1254 segvn_extend_prev(seg1, seg2, a, swresv)
1257 1255 struct seg *seg1, *seg2;
1258 1256 struct segvn_crargs *a;
1259 1257 size_t swresv;
1260 1258 {
1261 1259 struct segvn_data *svd1 = (struct segvn_data *)seg1->s_data;
1262 1260 size_t size;
1263 1261 struct anon_map *amp1;
1264 1262 struct vpage *new_vpage;
1265 1263
1266 1264 /*
1267 1265 * We don't need any segment level locks for "segvn" data
1268 1266 * since the address space is "write" locked.
1269 1267 */
1270 1268 ASSERT(seg1->s_as && AS_WRITE_HELD(seg1->s_as));
1271 1269
1272 1270 if (HAT_IS_REGION_COOKIE_VALID(svd1->rcookie)) {
1273 1271 return (-1);
1274 1272 }
1275 1273
1276 1274 /* second segment is new, try to extend first */
1277 1275 /* XXX - should also check cred */
1278 1276 if (svd1->vp != a->vp || svd1->maxprot != a->maxprot ||
1279 1277 (!svd1->pageprot && (svd1->prot != a->prot)) ||
1280 1278 svd1->type != a->type || svd1->flags != a->flags ||
1281 1279 seg1->s_szc != a->szc || svd1->softlockcnt_send > 0)
1282 1280 return (-1);
1283 1281
1284 1282 /* vp == NULL implies zfod, offset doesn't matter */
1285 1283 if (svd1->vp != NULL &&
1286 1284 svd1->offset + seg1->s_size != (a->offset & PAGEMASK))
1287 1285 return (-1);
1288 1286
1289 1287 if (svd1->tr_state != SEGVN_TR_OFF) {
1290 1288 return (-1);
1291 1289 }
1292 1290
1293 1291 amp1 = svd1->amp;
1294 1292 if (amp1) {
1295 1293 pgcnt_t newpgs;
1296 1294
1297 1295 /*
1298 1296 * Segment has private pages, can data structures
1299 1297 * be expanded?
1300 1298 *
1301 1299 * Acquire the anon_map lock to prevent it from changing,
1302 1300 * if it is shared. This ensures that the anon_map
1303 1301 * will not change while a thread which has a read/write
1304 1302 * lock on an address space references it.
1305 1303 * XXX - Don't need the anon_map lock at all if "refcnt"
1306 1304 * is 1.
1307 1305 *
1308 1306 * Can't grow a MAP_SHARED segment with an anonmap because
1309 1307 * there may be existing anon slots where we want to extend
1310 1308 * the segment and we wouldn't know what to do with them
1311 1309 * (e.g., for tmpfs right thing is to just leave them there,
1312 1310 * for /dev/zero they should be cleared out).
1313 1311 */
1314 1312 if (svd1->type == MAP_SHARED)
1315 1313 return (-1);
1316 1314
1317 1315 ANON_LOCK_ENTER(&1->a_rwlock, RW_WRITER);
1318 1316 if (amp1->refcnt > 1) {
1319 1317 ANON_LOCK_EXIT(&1->a_rwlock);
1320 1318 return (-1);
1321 1319 }
1322 1320 newpgs = anon_grow(amp1->ahp, &svd1->anon_index,
1323 1321 btop(seg1->s_size), btop(seg2->s_size), ANON_NOSLEEP);
1324 1322
1325 1323 if (newpgs == 0) {
1326 1324 ANON_LOCK_EXIT(&1->a_rwlock);
1327 1325 return (-1);
1328 1326 }
1329 1327 amp1->size = ptob(newpgs);
1330 1328 ANON_LOCK_EXIT(&1->a_rwlock);
1331 1329 }
1332 1330 if (svd1->vpage != NULL) {
1333 1331 struct vpage *vp, *evp;
1334 1332 new_vpage =
1335 1333 kmem_zalloc(vpgtob(seg_pages(seg1) + seg_pages(seg2)),
1336 1334 KM_NOSLEEP);
1337 1335 if (new_vpage == NULL)
1338 1336 return (-1);
1339 1337 bcopy(svd1->vpage, new_vpage, vpgtob(seg_pages(seg1)));
1340 1338 kmem_free(svd1->vpage, vpgtob(seg_pages(seg1)));
1341 1339 svd1->vpage = new_vpage;
1342 1340
1343 1341 vp = new_vpage + seg_pages(seg1);
1344 1342 evp = vp + seg_pages(seg2);
1345 1343 for (; vp < evp; vp++)
1346 1344 VPP_SETPROT(vp, a->prot);
1347 1345 if (svd1->pageswap && swresv) {
1348 1346 ASSERT(!(svd1->flags & MAP_NORESERVE));
1349 1347 ASSERT(swresv == seg2->s_size);
1350 1348 vp = new_vpage + seg_pages(seg1);
1351 1349 for (; vp < evp; vp++) {
1352 1350 VPP_SETSWAPRES(vp);
1353 1351 }
1354 1352 }
1355 1353 }
1356 1354 ASSERT(svd1->vpage != NULL || svd1->pageswap == 0);
1357 1355 size = seg2->s_size;
1358 1356 seg_free(seg2);
1359 1357 seg1->s_size += size;
1360 1358 svd1->swresv += swresv;
1361 1359 if (svd1->pageprot && (a->prot & PROT_WRITE) &&
1362 1360 svd1->type == MAP_SHARED && svd1->vp != NULL &&
1363 1361 (svd1->vp->v_flag & VVMEXEC)) {
1364 1362 ASSERT(vn_is_mapped(svd1->vp, V_WRITE));
1365 1363 segvn_inval_trcache(svd1->vp);
1366 1364 }
1367 1365 return (0);
1368 1366 }
1369 1367
1370 1368 /*
1371 1369 * Extend the next segment (seg2) to include the
1372 1370 * new segment (seg1 + a), if possible.
1373 1371 * Return 0 on success.
1374 1372 */
1375 1373 static int
1376 1374 segvn_extend_next(
1377 1375 struct seg *seg1,
1378 1376 struct seg *seg2,
1379 1377 struct segvn_crargs *a,
1380 1378 size_t swresv)
1381 1379 {
1382 1380 struct segvn_data *svd2 = (struct segvn_data *)seg2->s_data;
1383 1381 size_t size;
1384 1382 struct anon_map *amp2;
1385 1383 struct vpage *new_vpage;
1386 1384
1387 1385 /*
1388 1386 * We don't need any segment level locks for "segvn" data
1389 1387 * since the address space is "write" locked.
1390 1388 */
1391 1389 ASSERT(seg2->s_as && AS_WRITE_HELD(seg2->s_as));
1392 1390
1393 1391 if (HAT_IS_REGION_COOKIE_VALID(svd2->rcookie)) {
1394 1392 return (-1);
1395 1393 }
1396 1394
1397 1395 /* first segment is new, try to extend second */
1398 1396 /* XXX - should also check cred */
1399 1397 if (svd2->vp != a->vp || svd2->maxprot != a->maxprot ||
1400 1398 (!svd2->pageprot && (svd2->prot != a->prot)) ||
1401 1399 svd2->type != a->type || svd2->flags != a->flags ||
1402 1400 seg2->s_szc != a->szc || svd2->softlockcnt_sbase > 0)
1403 1401 return (-1);
1404 1402 /* vp == NULL implies zfod, offset doesn't matter */
1405 1403 if (svd2->vp != NULL &&
1406 1404 (a->offset & PAGEMASK) + seg1->s_size != svd2->offset)
1407 1405 return (-1);
1408 1406
1409 1407 if (svd2->tr_state != SEGVN_TR_OFF) {
1410 1408 return (-1);
1411 1409 }
1412 1410
1413 1411 amp2 = svd2->amp;
1414 1412 if (amp2) {
1415 1413 pgcnt_t newpgs;
1416 1414
1417 1415 /*
1418 1416 * Segment has private pages, can data structures
1419 1417 * be expanded?
1420 1418 *
1421 1419 * Acquire the anon_map lock to prevent it from changing,
1422 1420 * if it is shared. This ensures that the anon_map
1423 1421 * will not change while a thread which has a read/write
1424 1422 * lock on an address space references it.
1425 1423 *
1426 1424 * XXX - Don't need the anon_map lock at all if "refcnt"
1427 1425 * is 1.
1428 1426 */
1429 1427 if (svd2->type == MAP_SHARED)
1430 1428 return (-1);
1431 1429
1432 1430 ANON_LOCK_ENTER(&2->a_rwlock, RW_WRITER);
1433 1431 if (amp2->refcnt > 1) {
1434 1432 ANON_LOCK_EXIT(&2->a_rwlock);
1435 1433 return (-1);
1436 1434 }
1437 1435 newpgs = anon_grow(amp2->ahp, &svd2->anon_index,
1438 1436 btop(seg2->s_size), btop(seg1->s_size),
1439 1437 ANON_NOSLEEP | ANON_GROWDOWN);
1440 1438
1441 1439 if (newpgs == 0) {
1442 1440 ANON_LOCK_EXIT(&2->a_rwlock);
1443 1441 return (-1);
1444 1442 }
1445 1443 amp2->size = ptob(newpgs);
1446 1444 ANON_LOCK_EXIT(&2->a_rwlock);
1447 1445 }
1448 1446 if (svd2->vpage != NULL) {
1449 1447 struct vpage *vp, *evp;
1450 1448 new_vpage =
1451 1449 kmem_zalloc(vpgtob(seg_pages(seg1) + seg_pages(seg2)),
1452 1450 KM_NOSLEEP);
1453 1451 if (new_vpage == NULL) {
1454 1452 /* Not merging segments so adjust anon_index back */
1455 1453 if (amp2)
1456 1454 svd2->anon_index += seg_pages(seg1);
1457 1455 return (-1);
1458 1456 }
1459 1457 bcopy(svd2->vpage, new_vpage + seg_pages(seg1),
1460 1458 vpgtob(seg_pages(seg2)));
1461 1459 kmem_free(svd2->vpage, vpgtob(seg_pages(seg2)));
1462 1460 svd2->vpage = new_vpage;
1463 1461
1464 1462 vp = new_vpage;
1465 1463 evp = vp + seg_pages(seg1);
1466 1464 for (; vp < evp; vp++)
1467 1465 VPP_SETPROT(vp, a->prot);
1468 1466 if (svd2->pageswap && swresv) {
1469 1467 ASSERT(!(svd2->flags & MAP_NORESERVE));
1470 1468 ASSERT(swresv == seg1->s_size);
1471 1469 vp = new_vpage;
1472 1470 for (; vp < evp; vp++) {
1473 1471 VPP_SETSWAPRES(vp);
1474 1472 }
1475 1473 }
1476 1474 }
1477 1475 ASSERT(svd2->vpage != NULL || svd2->pageswap == 0);
1478 1476 size = seg1->s_size;
1479 1477 seg_free(seg1);
1480 1478 seg2->s_size += size;
1481 1479 seg2->s_base -= size;
1482 1480 svd2->offset -= size;
1483 1481 svd2->swresv += swresv;
1484 1482 if (svd2->pageprot && (a->prot & PROT_WRITE) &&
1485 1483 svd2->type == MAP_SHARED && svd2->vp != NULL &&
1486 1484 (svd2->vp->v_flag & VVMEXEC)) {
1487 1485 ASSERT(vn_is_mapped(svd2->vp, V_WRITE));
1488 1486 segvn_inval_trcache(svd2->vp);
1489 1487 }
1490 1488 return (0);
1491 1489 }
1492 1490
1493 1491 /*
1494 1492 * Duplicate all the pages in the segment. This may break COW sharing for a
1495 1493 * given page. If the page is marked with inherit zero set, then instead of
1496 1494 * duplicating the page, we zero the page.
1497 1495 */
1498 1496 static int
1499 1497 segvn_dup_pages(struct seg *seg, struct seg *newseg)
1500 1498 {
1501 1499 int error;
1502 1500 uint_t prot;
1503 1501 page_t *pp;
1504 1502 struct anon *ap, *newap;
1505 1503 size_t i;
1506 1504 caddr_t addr;
1507 1505
1508 1506 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
1509 1507 struct segvn_data *newsvd = (struct segvn_data *)newseg->s_data;
1510 1508 ulong_t old_idx = svd->anon_index;
1511 1509 ulong_t new_idx = 0;
1512 1510
1513 1511 i = btopr(seg->s_size);
1514 1512 addr = seg->s_base;
1515 1513
1516 1514 /*
1517 1515 * XXX break cow sharing using PAGESIZE
1518 1516 * pages. They will be relocated into larger
1519 1517 * pages at fault time.
1520 1518 */
1521 1519 while (i-- > 0) {
1522 1520 if ((ap = anon_get_ptr(svd->amp->ahp, old_idx)) != NULL) {
1523 1521 struct vpage *vpp;
1524 1522
1525 1523 vpp = &svd->vpage[seg_page(seg, addr)];
1526 1524
1527 1525 /*
1528 1526 * prot need not be computed below 'cause anon_private
1529 1527 * is going to ignore it anyway as child doesn't inherit
1530 1528 * pagelock from parent.
1531 1529 */
1532 1530 prot = svd->pageprot ? VPP_PROT(vpp) : svd->prot;
1533 1531
1534 1532 /*
1535 1533 * Check whether we should zero this or dup it.
1536 1534 */
1537 1535 if (svd->svn_inz == SEGVN_INZ_ALL ||
1538 1536 (svd->svn_inz == SEGVN_INZ_VPP &&
1539 1537 VPP_ISINHZERO(vpp))) {
1540 1538 pp = anon_zero(newseg, addr, &newap,
1541 1539 newsvd->cred);
1542 1540 } else {
1543 1541 page_t *anon_pl[1+1];
1544 1542 uint_t vpprot;
1545 1543 error = anon_getpage(&ap, &vpprot, anon_pl,
1546 1544 PAGESIZE, seg, addr, S_READ, svd->cred);
1547 1545 if (error != 0)
1548 1546 return (error);
1549 1547
1550 1548 pp = anon_private(&newap, newseg, addr, prot,
1551 1549 anon_pl[0], 0, newsvd->cred);
1552 1550 }
1553 1551 if (pp == NULL) {
1554 1552 return (ENOMEM);
1555 1553 }
1556 1554 (void) anon_set_ptr(newsvd->amp->ahp, new_idx, newap,
1557 1555 ANON_SLEEP);
1558 1556 page_unlock(pp);
1559 1557 }
1560 1558 addr += PAGESIZE;
1561 1559 old_idx++;
1562 1560 new_idx++;
1563 1561 }
1564 1562
1565 1563 return (0);
1566 1564 }
1567 1565
1568 1566 static int
1569 1567 segvn_dup(struct seg *seg, struct seg *newseg)
1570 1568 {
1571 1569 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
1572 1570 struct segvn_data *newsvd;
1573 1571 pgcnt_t npages = seg_pages(seg);
1574 1572 int error = 0;
1575 1573 size_t len;
1576 1574 struct anon_map *amp;
1577 1575
1578 1576 ASSERT(seg->s_as && AS_WRITE_HELD(seg->s_as));
1579 1577 ASSERT(newseg->s_as->a_proc->p_parent == curproc);
1580 1578
1581 1579 /*
1582 1580 * If segment has anon reserved, reserve more for the new seg.
1583 1581 * For a MAP_NORESERVE segment swresv will be a count of all the
1584 1582 * allocated anon slots; thus we reserve for the child as many slots
1585 1583 * as the parent has allocated. This semantic prevents the child or
1586 1584 * parent from dieing during a copy-on-write fault caused by trying
1587 1585 * to write a shared pre-existing anon page.
1588 1586 */
1589 1587 if ((len = svd->swresv) != 0) {
1590 1588 if (anon_resv(svd->swresv) == 0)
1591 1589 return (ENOMEM);
1592 1590
1593 1591 TRACE_3(TR_FAC_VM, TR_ANON_PROC, "anon proc:%p %lu %u",
1594 1592 seg, len, 0);
1595 1593 }
1596 1594
1597 1595 newsvd = kmem_cache_alloc(segvn_cache, KM_SLEEP);
1598 1596
1599 1597 newseg->s_ops = &segvn_ops;
1600 1598 newseg->s_data = (void *)newsvd;
1601 1599 newseg->s_szc = seg->s_szc;
1602 1600
1603 1601 newsvd->seg = newseg;
1604 1602 if ((newsvd->vp = svd->vp) != NULL) {
1605 1603 VN_HOLD(svd->vp);
1606 1604 if (svd->type == MAP_SHARED)
1607 1605 lgrp_shm_policy_init(NULL, svd->vp);
1608 1606 }
1609 1607 newsvd->offset = svd->offset;
1610 1608 newsvd->prot = svd->prot;
1611 1609 newsvd->maxprot = svd->maxprot;
1612 1610 newsvd->pageprot = svd->pageprot;
1613 1611 newsvd->type = svd->type;
1614 1612 newsvd->cred = svd->cred;
1615 1613 crhold(newsvd->cred);
1616 1614 newsvd->advice = svd->advice;
1617 1615 newsvd->pageadvice = svd->pageadvice;
1618 1616 newsvd->svn_inz = svd->svn_inz;
1619 1617 newsvd->swresv = svd->swresv;
1620 1618 newsvd->pageswap = svd->pageswap;
1621 1619 newsvd->flags = svd->flags;
1622 1620 newsvd->softlockcnt = 0;
1623 1621 newsvd->softlockcnt_sbase = 0;
1624 1622 newsvd->softlockcnt_send = 0;
1625 1623 newsvd->policy_info = svd->policy_info;
1626 1624 newsvd->rcookie = HAT_INVALID_REGION_COOKIE;
1627 1625
1628 1626 if ((amp = svd->amp) == NULL || svd->tr_state == SEGVN_TR_ON) {
1629 1627 /*
1630 1628 * Not attaching to a shared anon object.
1631 1629 */
1632 1630 ASSERT(!HAT_IS_REGION_COOKIE_VALID(svd->rcookie) ||
1633 1631 svd->tr_state == SEGVN_TR_OFF);
1634 1632 if (svd->tr_state == SEGVN_TR_ON) {
1635 1633 ASSERT(newsvd->vp != NULL && amp != NULL);
1636 1634 newsvd->tr_state = SEGVN_TR_INIT;
1637 1635 } else {
1638 1636 newsvd->tr_state = svd->tr_state;
1639 1637 }
1640 1638 newsvd->amp = NULL;
1641 1639 newsvd->anon_index = 0;
1642 1640 } else {
1643 1641 /* regions for now are only used on pure vnode segments */
1644 1642 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
1645 1643 ASSERT(svd->tr_state == SEGVN_TR_OFF);
1646 1644 newsvd->tr_state = SEGVN_TR_OFF;
1647 1645 if (svd->type == MAP_SHARED) {
1648 1646 ASSERT(svd->svn_inz == SEGVN_INZ_NONE);
1649 1647 newsvd->amp = amp;
1650 1648 ANON_LOCK_ENTER(&->a_rwlock, RW_WRITER);
1651 1649 amp->refcnt++;
1652 1650 ANON_LOCK_EXIT(&->a_rwlock);
1653 1651 newsvd->anon_index = svd->anon_index;
1654 1652 } else {
1655 1653 int reclaim = 1;
1656 1654
1657 1655 /*
1658 1656 * Allocate and initialize new anon_map structure.
1659 1657 */
1660 1658 newsvd->amp = anonmap_alloc(newseg->s_size, 0,
1661 1659 ANON_SLEEP);
1662 1660 newsvd->amp->a_szc = newseg->s_szc;
1663 1661 newsvd->anon_index = 0;
1664 1662 ASSERT(svd->svn_inz == SEGVN_INZ_NONE ||
1665 1663 svd->svn_inz == SEGVN_INZ_ALL ||
1666 1664 svd->svn_inz == SEGVN_INZ_VPP);
1667 1665
1668 1666 /*
1669 1667 * We don't have to acquire the anon_map lock
1670 1668 * for the new segment (since it belongs to an
1671 1669 * address space that is still not associated
1672 1670 * with any process), or the segment in the old
1673 1671 * address space (since all threads in it
1674 1672 * are stopped while duplicating the address space).
1675 1673 */
1676 1674
1677 1675 /*
1678 1676 * The goal of the following code is to make sure that
1679 1677 * softlocked pages do not end up as copy on write
1680 1678 * pages. This would cause problems where one
1681 1679 * thread writes to a page that is COW and a different
1682 1680 * thread in the same process has softlocked it. The
1683 1681 * softlock lock would move away from this process
1684 1682 * because the write would cause this process to get
1685 1683 * a copy (without the softlock).
1686 1684 *
1687 1685 * The strategy here is to just break the
1688 1686 * sharing on pages that could possibly be
1689 1687 * softlocked.
1690 1688 *
1691 1689 * In addition, if any pages have been marked that they
1692 1690 * should be inherited as zero, then we immediately go
1693 1691 * ahead and break COW and zero them. In the case of a
1694 1692 * softlocked page that should be inherited zero, we
1695 1693 * break COW and just get a zero page.
1696 1694 */
1697 1695 retry:
1698 1696 if (svd->softlockcnt ||
1699 1697 svd->svn_inz != SEGVN_INZ_NONE) {
1700 1698 /*
1701 1699 * The softlock count might be non zero
1702 1700 * because some pages are still stuck in the
1703 1701 * cache for lazy reclaim. Flush the cache
1704 1702 * now. This should drop the count to zero.
1705 1703 * [or there is really I/O going on to these
1706 1704 * pages]. Note, we have the writers lock so
1707 1705 * nothing gets inserted during the flush.
1708 1706 */
1709 1707 if (svd->softlockcnt && reclaim == 1) {
1710 1708 segvn_purge(seg);
1711 1709 reclaim = 0;
1712 1710 goto retry;
1713 1711 }
1714 1712
1715 1713 error = segvn_dup_pages(seg, newseg);
1716 1714 if (error != 0) {
1717 1715 newsvd->vpage = NULL;
1718 1716 goto out;
1719 1717 }
1720 1718 } else { /* common case */
1721 1719 if (seg->s_szc != 0) {
1722 1720 /*
1723 1721 * If at least one of anon slots of a
1724 1722 * large page exists then make sure
1725 1723 * all anon slots of a large page
1726 1724 * exist to avoid partial cow sharing
1727 1725 * of a large page in the future.
1728 1726 */
1729 1727 anon_dup_fill_holes(amp->ahp,
1730 1728 svd->anon_index, newsvd->amp->ahp,
1731 1729 0, seg->s_size, seg->s_szc,
1732 1730 svd->vp != NULL);
1733 1731 } else {
1734 1732 anon_dup(amp->ahp, svd->anon_index,
1735 1733 newsvd->amp->ahp, 0, seg->s_size);
1736 1734 }
1737 1735
1738 1736 hat_clrattr(seg->s_as->a_hat, seg->s_base,
1739 1737 seg->s_size, PROT_WRITE);
1740 1738 }
1741 1739 }
1742 1740 }
1743 1741 /*
1744 1742 * If necessary, create a vpage structure for the new segment.
1745 1743 * Do not copy any page lock indications.
1746 1744 */
1747 1745 if (svd->vpage != NULL) {
1748 1746 uint_t i;
1749 1747 struct vpage *ovp = svd->vpage;
1750 1748 struct vpage *nvp;
1751 1749
1752 1750 nvp = newsvd->vpage =
1753 1751 kmem_alloc(vpgtob(npages), KM_SLEEP);
1754 1752 for (i = 0; i < npages; i++) {
1755 1753 *nvp = *ovp++;
1756 1754 VPP_CLRPPLOCK(nvp++);
1757 1755 }
1758 1756 } else
1759 1757 newsvd->vpage = NULL;
1760 1758
1761 1759 /* Inform the vnode of the new mapping */
1762 1760 if (newsvd->vp != NULL) {
1763 1761 error = VOP_ADDMAP(newsvd->vp, (offset_t)newsvd->offset,
1764 1762 newseg->s_as, newseg->s_base, newseg->s_size, newsvd->prot,
1765 1763 newsvd->maxprot, newsvd->type, newsvd->cred, NULL);
1766 1764 }
1767 1765 out:
1768 1766 if (error == 0 && HAT_IS_REGION_COOKIE_VALID(svd->rcookie)) {
1769 1767 ASSERT(newsvd->amp == NULL);
1770 1768 ASSERT(newsvd->tr_state == SEGVN_TR_OFF);
1771 1769 newsvd->rcookie = svd->rcookie;
1772 1770 hat_dup_region(newseg->s_as->a_hat, newsvd->rcookie);
1773 1771 }
1774 1772 return (error);
1775 1773 }
1776 1774
1777 1775
1778 1776 /*
1779 1777 * callback function to invoke free_vp_pages() for only those pages actually
1780 1778 * processed by the HAT when a shared region is destroyed.
1781 1779 */
1782 1780 extern int free_pages;
1783 1781
1784 1782 static void
1785 1783 segvn_hat_rgn_unload_callback(caddr_t saddr, caddr_t eaddr, caddr_t r_saddr,
1786 1784 size_t r_size, void *r_obj, u_offset_t r_objoff)
1787 1785 {
1788 1786 u_offset_t off;
1789 1787 size_t len;
1790 1788 vnode_t *vp = (vnode_t *)r_obj;
1791 1789
1792 1790 ASSERT(eaddr > saddr);
1793 1791 ASSERT(saddr >= r_saddr);
1794 1792 ASSERT(saddr < r_saddr + r_size);
1795 1793 ASSERT(eaddr > r_saddr);
1796 1794 ASSERT(eaddr <= r_saddr + r_size);
1797 1795 ASSERT(vp != NULL);
1798 1796
1799 1797 if (!free_pages) {
1800 1798 return;
1801 1799 }
1802 1800
1803 1801 len = eaddr - saddr;
1804 1802 off = (saddr - r_saddr) + r_objoff;
1805 1803 free_vp_pages(vp, off, len);
1806 1804 }
1807 1805
1808 1806 /*
1809 1807 * callback function used by segvn_unmap to invoke free_vp_pages() for only
1810 1808 * those pages actually processed by the HAT
1811 1809 */
1812 1810 static void
1813 1811 segvn_hat_unload_callback(hat_callback_t *cb)
1814 1812 {
1815 1813 struct seg *seg = cb->hcb_data;
1816 1814 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
1817 1815 size_t len;
1818 1816 u_offset_t off;
1819 1817
1820 1818 ASSERT(svd->vp != NULL);
1821 1819 ASSERT(cb->hcb_end_addr > cb->hcb_start_addr);
1822 1820 ASSERT(cb->hcb_start_addr >= seg->s_base);
1823 1821
1824 1822 len = cb->hcb_end_addr - cb->hcb_start_addr;
1825 1823 off = cb->hcb_start_addr - seg->s_base;
1826 1824 free_vp_pages(svd->vp, svd->offset + off, len);
1827 1825 }
1828 1826
1829 1827 /*
1830 1828 * This function determines the number of bytes of swap reserved by
1831 1829 * a segment for which per-page accounting is present. It is used to
1832 1830 * calculate the correct value of a segvn_data's swresv.
1833 1831 */
1834 1832 static size_t
1835 1833 segvn_count_swap_by_vpages(struct seg *seg)
1836 1834 {
1837 1835 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
1838 1836 struct vpage *vp, *evp;
1839 1837 size_t nswappages = 0;
1840 1838
1841 1839 ASSERT(svd->pageswap);
1842 1840 ASSERT(svd->vpage != NULL);
1843 1841
1844 1842 evp = &svd->vpage[seg_page(seg, seg->s_base + seg->s_size)];
1845 1843
1846 1844 for (vp = svd->vpage; vp < evp; vp++) {
1847 1845 if (VPP_ISSWAPRES(vp))
1848 1846 nswappages++;
1849 1847 }
1850 1848
1851 1849 return (nswappages << PAGESHIFT);
1852 1850 }
1853 1851
1854 1852 static int
1855 1853 segvn_unmap(struct seg *seg, caddr_t addr, size_t len)
1856 1854 {
1857 1855 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
1858 1856 struct segvn_data *nsvd;
1859 1857 struct seg *nseg;
1860 1858 struct anon_map *amp;
1861 1859 pgcnt_t opages; /* old segment size in pages */
1862 1860 pgcnt_t npages; /* new segment size in pages */
1863 1861 pgcnt_t dpages; /* pages being deleted (unmapped) */
1864 1862 hat_callback_t callback; /* used for free_vp_pages() */
1865 1863 hat_callback_t *cbp = NULL;
1866 1864 caddr_t nbase;
1867 1865 size_t nsize;
1868 1866 size_t oswresv;
1869 1867 int reclaim = 1;
1870 1868
1871 1869 /*
1872 1870 * We don't need any segment level locks for "segvn" data
1873 1871 * since the address space is "write" locked.
1874 1872 */
1875 1873 ASSERT(seg->s_as && AS_WRITE_HELD(seg->s_as));
1876 1874
1877 1875 /*
1878 1876 * Fail the unmap if pages are SOFTLOCKed through this mapping.
1879 1877 * softlockcnt is protected from change by the as write lock.
1880 1878 */
1881 1879 retry:
1882 1880 if (svd->softlockcnt > 0) {
1883 1881 ASSERT(svd->tr_state == SEGVN_TR_OFF);
1884 1882
1885 1883 /*
1886 1884 * If this is shared segment non 0 softlockcnt
1887 1885 * means locked pages are still in use.
1888 1886 */
1889 1887 if (svd->type == MAP_SHARED) {
1890 1888 return (EAGAIN);
1891 1889 }
1892 1890
1893 1891 /*
1894 1892 * since we do have the writers lock nobody can fill
1895 1893 * the cache during the purge. The flush either succeeds
1896 1894 * or we still have pending I/Os.
1897 1895 */
1898 1896 if (reclaim == 1) {
1899 1897 segvn_purge(seg);
1900 1898 reclaim = 0;
1901 1899 goto retry;
1902 1900 }
1903 1901 return (EAGAIN);
1904 1902 }
1905 1903
1906 1904 /*
1907 1905 * Check for bad sizes
1908 1906 */
1909 1907 if (addr < seg->s_base || addr + len > seg->s_base + seg->s_size ||
1910 1908 (len & PAGEOFFSET) || ((uintptr_t)addr & PAGEOFFSET)) {
1911 1909 panic("segvn_unmap");
1912 1910 /*NOTREACHED*/
1913 1911 }
1914 1912
1915 1913 if (seg->s_szc != 0) {
1916 1914 size_t pgsz = page_get_pagesize(seg->s_szc);
1917 1915 int err;
1918 1916 if (!IS_P2ALIGNED(addr, pgsz) || !IS_P2ALIGNED(len, pgsz)) {
1919 1917 ASSERT(seg->s_base != addr || seg->s_size != len);
1920 1918 if (HAT_IS_REGION_COOKIE_VALID(svd->rcookie)) {
1921 1919 ASSERT(svd->amp == NULL);
1922 1920 ASSERT(svd->tr_state == SEGVN_TR_OFF);
1923 1921 hat_leave_region(seg->s_as->a_hat,
1924 1922 svd->rcookie, HAT_REGION_TEXT);
1925 1923 svd->rcookie = HAT_INVALID_REGION_COOKIE;
1926 1924 /*
1927 1925 * could pass a flag to segvn_demote_range()
1928 1926 * below to tell it not to do any unloads but
1929 1927 * this case is rare enough to not bother for
1930 1928 * now.
1931 1929 */
1932 1930 } else if (svd->tr_state == SEGVN_TR_INIT) {
1933 1931 svd->tr_state = SEGVN_TR_OFF;
1934 1932 } else if (svd->tr_state == SEGVN_TR_ON) {
1935 1933 ASSERT(svd->amp != NULL);
1936 1934 segvn_textunrepl(seg, 1);
1937 1935 ASSERT(svd->amp == NULL);
1938 1936 ASSERT(svd->tr_state == SEGVN_TR_OFF);
1939 1937 }
1940 1938 VM_STAT_ADD(segvnvmstats.demoterange[0]);
1941 1939 err = segvn_demote_range(seg, addr, len, SDR_END, 0);
1942 1940 if (err == 0) {
1943 1941 return (IE_RETRY);
1944 1942 }
1945 1943 return (err);
1946 1944 }
1947 1945 }
1948 1946
1949 1947 /* Inform the vnode of the unmapping. */
1950 1948 if (svd->vp) {
1951 1949 int error;
1952 1950
1953 1951 error = VOP_DELMAP(svd->vp,
1954 1952 (offset_t)svd->offset + (uintptr_t)(addr - seg->s_base),
1955 1953 seg->s_as, addr, len, svd->prot, svd->maxprot,
1956 1954 svd->type, svd->cred, NULL);
1957 1955
1958 1956 if (error == EAGAIN)
1959 1957 return (error);
1960 1958 }
1961 1959
1962 1960 /*
1963 1961 * Remove any page locks set through this mapping.
1964 1962 * If text replication is not off no page locks could have been
1965 1963 * established via this mapping.
1966 1964 */
1967 1965 if (svd->tr_state == SEGVN_TR_OFF) {
1968 1966 (void) segvn_lockop(seg, addr, len, 0, MC_UNLOCK, NULL, 0);
1969 1967 }
1970 1968
1971 1969 if (HAT_IS_REGION_COOKIE_VALID(svd->rcookie)) {
1972 1970 ASSERT(svd->amp == NULL);
1973 1971 ASSERT(svd->tr_state == SEGVN_TR_OFF);
1974 1972 ASSERT(svd->type == MAP_PRIVATE);
1975 1973 hat_leave_region(seg->s_as->a_hat, svd->rcookie,
1976 1974 HAT_REGION_TEXT);
1977 1975 svd->rcookie = HAT_INVALID_REGION_COOKIE;
1978 1976 } else if (svd->tr_state == SEGVN_TR_ON) {
1979 1977 ASSERT(svd->amp != NULL);
1980 1978 ASSERT(svd->pageprot == 0 && !(svd->prot & PROT_WRITE));
1981 1979 segvn_textunrepl(seg, 1);
1982 1980 ASSERT(svd->amp == NULL && svd->tr_state == SEGVN_TR_OFF);
1983 1981 } else {
1984 1982 if (svd->tr_state != SEGVN_TR_OFF) {
1985 1983 ASSERT(svd->tr_state == SEGVN_TR_INIT);
1986 1984 svd->tr_state = SEGVN_TR_OFF;
1987 1985 }
1988 1986 /*
1989 1987 * Unload any hardware translations in the range to be taken
1990 1988 * out. Use a callback to invoke free_vp_pages() effectively.
1991 1989 */
1992 1990 if (svd->vp != NULL && free_pages != 0) {
1993 1991 callback.hcb_data = seg;
1994 1992 callback.hcb_function = segvn_hat_unload_callback;
1995 1993 cbp = &callback;
1996 1994 }
1997 1995 hat_unload_callback(seg->s_as->a_hat, addr, len,
1998 1996 HAT_UNLOAD_UNMAP, cbp);
1999 1997
2000 1998 if (svd->type == MAP_SHARED && svd->vp != NULL &&
2001 1999 (svd->vp->v_flag & VVMEXEC) &&
2002 2000 ((svd->prot & PROT_WRITE) || svd->pageprot)) {
2003 2001 segvn_inval_trcache(svd->vp);
2004 2002 }
2005 2003 }
2006 2004
2007 2005 /*
2008 2006 * Check for entire segment
2009 2007 */
2010 2008 if (addr == seg->s_base && len == seg->s_size) {
2011 2009 seg_free(seg);
2012 2010 return (0);
2013 2011 }
2014 2012
2015 2013 opages = seg_pages(seg);
2016 2014 dpages = btop(len);
2017 2015 npages = opages - dpages;
2018 2016 amp = svd->amp;
2019 2017 ASSERT(amp == NULL || amp->a_szc >= seg->s_szc);
2020 2018
2021 2019 /*
2022 2020 * Check for beginning of segment
2023 2021 */
2024 2022 if (addr == seg->s_base) {
2025 2023 if (svd->vpage != NULL) {
2026 2024 size_t nbytes;
2027 2025 struct vpage *ovpage;
2028 2026
2029 2027 ovpage = svd->vpage; /* keep pointer to vpage */
2030 2028
2031 2029 nbytes = vpgtob(npages);
2032 2030 svd->vpage = kmem_alloc(nbytes, KM_SLEEP);
2033 2031 bcopy(&ovpage[dpages], svd->vpage, nbytes);
2034 2032
2035 2033 /* free up old vpage */
2036 2034 kmem_free(ovpage, vpgtob(opages));
2037 2035 }
2038 2036 if (amp != NULL) {
2039 2037 ANON_LOCK_ENTER(&->a_rwlock, RW_WRITER);
2040 2038 if (amp->refcnt == 1 || svd->type == MAP_PRIVATE) {
2041 2039 /*
2042 2040 * Shared anon map is no longer in use. Before
2043 2041 * freeing its pages purge all entries from
2044 2042 * pcache that belong to this amp.
2045 2043 */
2046 2044 if (svd->type == MAP_SHARED) {
2047 2045 ASSERT(amp->refcnt == 1);
2048 2046 ASSERT(svd->softlockcnt == 0);
2049 2047 anonmap_purge(amp);
2050 2048 }
2051 2049 /*
2052 2050 * Free up now unused parts of anon_map array.
2053 2051 */
2054 2052 if (amp->a_szc == seg->s_szc) {
2055 2053 if (seg->s_szc != 0) {
2056 2054 anon_free_pages(amp->ahp,
2057 2055 svd->anon_index, len,
2058 2056 seg->s_szc);
2059 2057 } else {
2060 2058 anon_free(amp->ahp,
2061 2059 svd->anon_index,
2062 2060 len);
2063 2061 }
2064 2062 } else {
2065 2063 ASSERT(svd->type == MAP_SHARED);
2066 2064 ASSERT(amp->a_szc > seg->s_szc);
2067 2065 anon_shmap_free_pages(amp,
2068 2066 svd->anon_index, len);
2069 2067 }
2070 2068
2071 2069 /*
2072 2070 * Unreserve swap space for the
2073 2071 * unmapped chunk of this segment in
2074 2072 * case it's MAP_SHARED
2075 2073 */
2076 2074 if (svd->type == MAP_SHARED) {
2077 2075 anon_unresv_zone(len,
2078 2076 seg->s_as->a_proc->p_zone);
2079 2077 amp->swresv -= len;
2080 2078 }
2081 2079 }
2082 2080 ANON_LOCK_EXIT(&->a_rwlock);
2083 2081 svd->anon_index += dpages;
2084 2082 }
2085 2083 if (svd->vp != NULL)
2086 2084 svd->offset += len;
2087 2085
2088 2086 seg->s_base += len;
2089 2087 seg->s_size -= len;
2090 2088
2091 2089 if (svd->swresv) {
2092 2090 if (svd->flags & MAP_NORESERVE) {
2093 2091 ASSERT(amp);
2094 2092 oswresv = svd->swresv;
2095 2093
2096 2094 svd->swresv = ptob(anon_pages(amp->ahp,
2097 2095 svd->anon_index, npages));
2098 2096 anon_unresv_zone(oswresv - svd->swresv,
2099 2097 seg->s_as->a_proc->p_zone);
2100 2098 if (SEG_IS_PARTIAL_RESV(seg))
2101 2099 seg->s_as->a_resvsize -= oswresv -
2102 2100 svd->swresv;
2103 2101 } else {
2104 2102 size_t unlen;
2105 2103
2106 2104 if (svd->pageswap) {
2107 2105 oswresv = svd->swresv;
2108 2106 svd->swresv =
2109 2107 segvn_count_swap_by_vpages(seg);
2110 2108 ASSERT(oswresv >= svd->swresv);
2111 2109 unlen = oswresv - svd->swresv;
2112 2110 } else {
2113 2111 svd->swresv -= len;
2114 2112 ASSERT(svd->swresv == seg->s_size);
2115 2113 unlen = len;
2116 2114 }
2117 2115 anon_unresv_zone(unlen,
2118 2116 seg->s_as->a_proc->p_zone);
2119 2117 }
2120 2118 TRACE_3(TR_FAC_VM, TR_ANON_PROC, "anon proc:%p %lu %u",
2121 2119 seg, len, 0);
2122 2120 }
2123 2121
2124 2122 return (0);
2125 2123 }
2126 2124
2127 2125 /*
2128 2126 * Check for end of segment
2129 2127 */
2130 2128 if (addr + len == seg->s_base + seg->s_size) {
2131 2129 if (svd->vpage != NULL) {
2132 2130 size_t nbytes;
2133 2131 struct vpage *ovpage;
2134 2132
2135 2133 ovpage = svd->vpage; /* keep pointer to vpage */
2136 2134
2137 2135 nbytes = vpgtob(npages);
2138 2136 svd->vpage = kmem_alloc(nbytes, KM_SLEEP);
2139 2137 bcopy(ovpage, svd->vpage, nbytes);
2140 2138
2141 2139 /* free up old vpage */
2142 2140 kmem_free(ovpage, vpgtob(opages));
2143 2141
2144 2142 }
2145 2143 if (amp != NULL) {
2146 2144 ANON_LOCK_ENTER(&->a_rwlock, RW_WRITER);
2147 2145 if (amp->refcnt == 1 || svd->type == MAP_PRIVATE) {
2148 2146 /*
2149 2147 * Free up now unused parts of anon_map array.
2150 2148 */
2151 2149 ulong_t an_idx = svd->anon_index + npages;
2152 2150
2153 2151 /*
2154 2152 * Shared anon map is no longer in use. Before
2155 2153 * freeing its pages purge all entries from
2156 2154 * pcache that belong to this amp.
2157 2155 */
2158 2156 if (svd->type == MAP_SHARED) {
2159 2157 ASSERT(amp->refcnt == 1);
2160 2158 ASSERT(svd->softlockcnt == 0);
2161 2159 anonmap_purge(amp);
2162 2160 }
2163 2161
2164 2162 if (amp->a_szc == seg->s_szc) {
2165 2163 if (seg->s_szc != 0) {
2166 2164 anon_free_pages(amp->ahp,
2167 2165 an_idx, len,
2168 2166 seg->s_szc);
2169 2167 } else {
2170 2168 anon_free(amp->ahp, an_idx,
2171 2169 len);
2172 2170 }
2173 2171 } else {
2174 2172 ASSERT(svd->type == MAP_SHARED);
2175 2173 ASSERT(amp->a_szc > seg->s_szc);
2176 2174 anon_shmap_free_pages(amp,
2177 2175 an_idx, len);
2178 2176 }
2179 2177
2180 2178 /*
2181 2179 * Unreserve swap space for the
2182 2180 * unmapped chunk of this segment in
2183 2181 * case it's MAP_SHARED
2184 2182 */
2185 2183 if (svd->type == MAP_SHARED) {
2186 2184 anon_unresv_zone(len,
2187 2185 seg->s_as->a_proc->p_zone);
2188 2186 amp->swresv -= len;
2189 2187 }
2190 2188 }
2191 2189 ANON_LOCK_EXIT(&->a_rwlock);
2192 2190 }
2193 2191
2194 2192 seg->s_size -= len;
2195 2193
2196 2194 if (svd->swresv) {
2197 2195 if (svd->flags & MAP_NORESERVE) {
2198 2196 ASSERT(amp);
2199 2197 oswresv = svd->swresv;
2200 2198 svd->swresv = ptob(anon_pages(amp->ahp,
2201 2199 svd->anon_index, npages));
2202 2200 anon_unresv_zone(oswresv - svd->swresv,
2203 2201 seg->s_as->a_proc->p_zone);
2204 2202 if (SEG_IS_PARTIAL_RESV(seg))
2205 2203 seg->s_as->a_resvsize -= oswresv -
2206 2204 svd->swresv;
2207 2205 } else {
2208 2206 size_t unlen;
2209 2207
2210 2208 if (svd->pageswap) {
2211 2209 oswresv = svd->swresv;
2212 2210 svd->swresv =
2213 2211 segvn_count_swap_by_vpages(seg);
2214 2212 ASSERT(oswresv >= svd->swresv);
2215 2213 unlen = oswresv - svd->swresv;
2216 2214 } else {
2217 2215 svd->swresv -= len;
2218 2216 ASSERT(svd->swresv == seg->s_size);
2219 2217 unlen = len;
2220 2218 }
2221 2219 anon_unresv_zone(unlen,
2222 2220 seg->s_as->a_proc->p_zone);
2223 2221 }
2224 2222 TRACE_3(TR_FAC_VM, TR_ANON_PROC,
2225 2223 "anon proc:%p %lu %u", seg, len, 0);
2226 2224 }
2227 2225
2228 2226 return (0);
2229 2227 }
2230 2228
2231 2229 /*
2232 2230 * The section to go is in the middle of the segment,
2233 2231 * have to make it into two segments. nseg is made for
2234 2232 * the high end while seg is cut down at the low end.
2235 2233 */
2236 2234 nbase = addr + len; /* new seg base */
2237 2235 nsize = (seg->s_base + seg->s_size) - nbase; /* new seg size */
2238 2236 seg->s_size = addr - seg->s_base; /* shrink old seg */
2239 2237 nseg = seg_alloc(seg->s_as, nbase, nsize);
2240 2238 if (nseg == NULL) {
2241 2239 panic("segvn_unmap seg_alloc");
2242 2240 /*NOTREACHED*/
2243 2241 }
2244 2242 nseg->s_ops = seg->s_ops;
2245 2243 nsvd = kmem_cache_alloc(segvn_cache, KM_SLEEP);
2246 2244 nseg->s_data = (void *)nsvd;
2247 2245 nseg->s_szc = seg->s_szc;
2248 2246 *nsvd = *svd;
2249 2247 nsvd->seg = nseg;
2250 2248 nsvd->offset = svd->offset + (uintptr_t)(nseg->s_base - seg->s_base);
2251 2249 nsvd->swresv = 0;
2252 2250 nsvd->softlockcnt = 0;
2253 2251 nsvd->softlockcnt_sbase = 0;
2254 2252 nsvd->softlockcnt_send = 0;
2255 2253 nsvd->svn_inz = svd->svn_inz;
2256 2254 ASSERT(nsvd->rcookie == HAT_INVALID_REGION_COOKIE);
2257 2255
2258 2256 if (svd->vp != NULL) {
2259 2257 VN_HOLD(nsvd->vp);
2260 2258 if (nsvd->type == MAP_SHARED)
2261 2259 lgrp_shm_policy_init(NULL, nsvd->vp);
2262 2260 }
2263 2261 crhold(svd->cred);
2264 2262
2265 2263 if (svd->vpage == NULL) {
2266 2264 nsvd->vpage = NULL;
2267 2265 } else {
2268 2266 /* need to split vpage into two arrays */
2269 2267 size_t nbytes;
2270 2268 struct vpage *ovpage;
2271 2269
2272 2270 ovpage = svd->vpage; /* keep pointer to vpage */
2273 2271
2274 2272 npages = seg_pages(seg); /* seg has shrunk */
2275 2273 nbytes = vpgtob(npages);
2276 2274 svd->vpage = kmem_alloc(nbytes, KM_SLEEP);
2277 2275
2278 2276 bcopy(ovpage, svd->vpage, nbytes);
2279 2277
2280 2278 npages = seg_pages(nseg);
2281 2279 nbytes = vpgtob(npages);
2282 2280 nsvd->vpage = kmem_alloc(nbytes, KM_SLEEP);
2283 2281
2284 2282 bcopy(&ovpage[opages - npages], nsvd->vpage, nbytes);
2285 2283
2286 2284 /* free up old vpage */
2287 2285 kmem_free(ovpage, vpgtob(opages));
2288 2286 }
2289 2287
2290 2288 if (amp == NULL) {
2291 2289 nsvd->amp = NULL;
2292 2290 nsvd->anon_index = 0;
2293 2291 } else {
2294 2292 /*
2295 2293 * Need to create a new anon map for the new segment.
2296 2294 * We'll also allocate a new smaller array for the old
2297 2295 * smaller segment to save space.
2298 2296 */
2299 2297 opages = btop((uintptr_t)(addr - seg->s_base));
2300 2298 ANON_LOCK_ENTER(&->a_rwlock, RW_WRITER);
2301 2299 if (amp->refcnt == 1 || svd->type == MAP_PRIVATE) {
2302 2300 /*
2303 2301 * Free up now unused parts of anon_map array.
2304 2302 */
2305 2303 ulong_t an_idx = svd->anon_index + opages;
2306 2304
2307 2305 /*
2308 2306 * Shared anon map is no longer in use. Before
2309 2307 * freeing its pages purge all entries from
2310 2308 * pcache that belong to this amp.
2311 2309 */
2312 2310 if (svd->type == MAP_SHARED) {
2313 2311 ASSERT(amp->refcnt == 1);
2314 2312 ASSERT(svd->softlockcnt == 0);
2315 2313 anonmap_purge(amp);
2316 2314 }
2317 2315
2318 2316 if (amp->a_szc == seg->s_szc) {
2319 2317 if (seg->s_szc != 0) {
2320 2318 anon_free_pages(amp->ahp, an_idx, len,
2321 2319 seg->s_szc);
2322 2320 } else {
2323 2321 anon_free(amp->ahp, an_idx,
2324 2322 len);
2325 2323 }
2326 2324 } else {
2327 2325 ASSERT(svd->type == MAP_SHARED);
2328 2326 ASSERT(amp->a_szc > seg->s_szc);
2329 2327 anon_shmap_free_pages(amp, an_idx, len);
2330 2328 }
2331 2329
2332 2330 /*
2333 2331 * Unreserve swap space for the
2334 2332 * unmapped chunk of this segment in
2335 2333 * case it's MAP_SHARED
2336 2334 */
2337 2335 if (svd->type == MAP_SHARED) {
2338 2336 anon_unresv_zone(len,
2339 2337 seg->s_as->a_proc->p_zone);
2340 2338 amp->swresv -= len;
2341 2339 }
2342 2340 }
2343 2341 nsvd->anon_index = svd->anon_index +
2344 2342 btop((uintptr_t)(nseg->s_base - seg->s_base));
2345 2343 if (svd->type == MAP_SHARED) {
2346 2344 amp->refcnt++;
2347 2345 nsvd->amp = amp;
2348 2346 } else {
2349 2347 struct anon_map *namp;
2350 2348 struct anon_hdr *nahp;
2351 2349
2352 2350 ASSERT(svd->type == MAP_PRIVATE);
2353 2351 nahp = anon_create(btop(seg->s_size), ANON_SLEEP);
2354 2352 namp = anonmap_alloc(nseg->s_size, 0, ANON_SLEEP);
2355 2353 namp->a_szc = seg->s_szc;
2356 2354 (void) anon_copy_ptr(amp->ahp, svd->anon_index, nahp,
2357 2355 0, btop(seg->s_size), ANON_SLEEP);
2358 2356 (void) anon_copy_ptr(amp->ahp, nsvd->anon_index,
2359 2357 namp->ahp, 0, btop(nseg->s_size), ANON_SLEEP);
2360 2358 anon_release(amp->ahp, btop(amp->size));
2361 2359 svd->anon_index = 0;
2362 2360 nsvd->anon_index = 0;
2363 2361 amp->ahp = nahp;
2364 2362 amp->size = seg->s_size;
2365 2363 nsvd->amp = namp;
2366 2364 }
2367 2365 ANON_LOCK_EXIT(&->a_rwlock);
2368 2366 }
2369 2367 if (svd->swresv) {
2370 2368 if (svd->flags & MAP_NORESERVE) {
2371 2369 ASSERT(amp);
2372 2370 oswresv = svd->swresv;
2373 2371 svd->swresv = ptob(anon_pages(amp->ahp,
2374 2372 svd->anon_index, btop(seg->s_size)));
2375 2373 nsvd->swresv = ptob(anon_pages(nsvd->amp->ahp,
2376 2374 nsvd->anon_index, btop(nseg->s_size)));
2377 2375 ASSERT(oswresv >= (svd->swresv + nsvd->swresv));
2378 2376 anon_unresv_zone(oswresv - (svd->swresv + nsvd->swresv),
2379 2377 seg->s_as->a_proc->p_zone);
2380 2378 if (SEG_IS_PARTIAL_RESV(seg))
2381 2379 seg->s_as->a_resvsize -= oswresv -
2382 2380 (svd->swresv + nsvd->swresv);
2383 2381 } else {
2384 2382 size_t unlen;
2385 2383
2386 2384 if (svd->pageswap) {
2387 2385 oswresv = svd->swresv;
2388 2386 svd->swresv = segvn_count_swap_by_vpages(seg);
2389 2387 nsvd->swresv = segvn_count_swap_by_vpages(nseg);
2390 2388 ASSERT(oswresv >= (svd->swresv + nsvd->swresv));
2391 2389 unlen = oswresv - (svd->swresv + nsvd->swresv);
2392 2390 } else {
2393 2391 if (seg->s_size + nseg->s_size + len !=
2394 2392 svd->swresv) {
2395 2393 panic("segvn_unmap: cannot split "
2396 2394 "swap reservation");
2397 2395 /*NOTREACHED*/
2398 2396 }
2399 2397 svd->swresv = seg->s_size;
2400 2398 nsvd->swresv = nseg->s_size;
2401 2399 unlen = len;
2402 2400 }
2403 2401 anon_unresv_zone(unlen,
2404 2402 seg->s_as->a_proc->p_zone);
2405 2403 }
2406 2404 TRACE_3(TR_FAC_VM, TR_ANON_PROC, "anon proc:%p %lu %u",
2407 2405 seg, len, 0);
2408 2406 }
2409 2407
2410 2408 return (0); /* I'm glad that's all over with! */
2411 2409 }
2412 2410
2413 2411 static void
2414 2412 segvn_free(struct seg *seg)
2415 2413 {
2416 2414 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
2417 2415 pgcnt_t npages = seg_pages(seg);
2418 2416 struct anon_map *amp;
2419 2417 size_t len;
2420 2418
2421 2419 /*
2422 2420 * We don't need any segment level locks for "segvn" data
2423 2421 * since the address space is "write" locked.
2424 2422 */
2425 2423 ASSERT(seg->s_as && AS_WRITE_HELD(seg->s_as));
2426 2424 ASSERT(svd->tr_state == SEGVN_TR_OFF);
2427 2425
2428 2426 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
2429 2427
2430 2428 /*
2431 2429 * Be sure to unlock pages. XXX Why do things get free'ed instead
2432 2430 * of unmapped? XXX
2433 2431 */
2434 2432 (void) segvn_lockop(seg, seg->s_base, seg->s_size,
2435 2433 0, MC_UNLOCK, NULL, 0);
2436 2434
2437 2435 /*
2438 2436 * Deallocate the vpage and anon pointers if necessary and possible.
2439 2437 */
2440 2438 if (svd->vpage != NULL) {
2441 2439 kmem_free(svd->vpage, vpgtob(npages));
2442 2440 svd->vpage = NULL;
2443 2441 }
2444 2442 if ((amp = svd->amp) != NULL) {
2445 2443 /*
2446 2444 * If there are no more references to this anon_map
2447 2445 * structure, then deallocate the structure after freeing
2448 2446 * up all the anon slot pointers that we can.
2449 2447 */
2450 2448 ANON_LOCK_ENTER(&->a_rwlock, RW_WRITER);
2451 2449 ASSERT(amp->a_szc >= seg->s_szc);
2452 2450 if (--amp->refcnt == 0) {
2453 2451 if (svd->type == MAP_PRIVATE) {
2454 2452 /*
2455 2453 * Private - we only need to anon_free
2456 2454 * the part that this segment refers to.
2457 2455 */
2458 2456 if (seg->s_szc != 0) {
2459 2457 anon_free_pages(amp->ahp,
2460 2458 svd->anon_index, seg->s_size,
2461 2459 seg->s_szc);
2462 2460 } else {
2463 2461 anon_free(amp->ahp, svd->anon_index,
2464 2462 seg->s_size);
2465 2463 }
2466 2464 } else {
2467 2465
2468 2466 /*
2469 2467 * Shared anon map is no longer in use. Before
2470 2468 * freeing its pages purge all entries from
2471 2469 * pcache that belong to this amp.
2472 2470 */
2473 2471 ASSERT(svd->softlockcnt == 0);
2474 2472 anonmap_purge(amp);
2475 2473
2476 2474 /*
2477 2475 * Shared - anon_free the entire
2478 2476 * anon_map's worth of stuff and
2479 2477 * release any swap reservation.
2480 2478 */
2481 2479 if (amp->a_szc != 0) {
2482 2480 anon_shmap_free_pages(amp, 0,
2483 2481 amp->size);
2484 2482 } else {
2485 2483 anon_free(amp->ahp, 0, amp->size);
2486 2484 }
2487 2485 if ((len = amp->swresv) != 0) {
2488 2486 anon_unresv_zone(len,
2489 2487 seg->s_as->a_proc->p_zone);
2490 2488 TRACE_3(TR_FAC_VM, TR_ANON_PROC,
2491 2489 "anon proc:%p %lu %u", seg, len, 0);
2492 2490 }
2493 2491 }
2494 2492 svd->amp = NULL;
2495 2493 ANON_LOCK_EXIT(&->a_rwlock);
2496 2494 anonmap_free(amp);
2497 2495 } else if (svd->type == MAP_PRIVATE) {
2498 2496 /*
2499 2497 * We had a private mapping which still has
2500 2498 * a held anon_map so just free up all the
2501 2499 * anon slot pointers that we were using.
2502 2500 */
2503 2501 if (seg->s_szc != 0) {
2504 2502 anon_free_pages(amp->ahp, svd->anon_index,
2505 2503 seg->s_size, seg->s_szc);
2506 2504 } else {
2507 2505 anon_free(amp->ahp, svd->anon_index,
2508 2506 seg->s_size);
2509 2507 }
2510 2508 ANON_LOCK_EXIT(&->a_rwlock);
2511 2509 } else {
2512 2510 ANON_LOCK_EXIT(&->a_rwlock);
2513 2511 }
2514 2512 }
2515 2513
2516 2514 /*
2517 2515 * Release swap reservation.
2518 2516 */
2519 2517 if ((len = svd->swresv) != 0) {
2520 2518 anon_unresv_zone(svd->swresv,
2521 2519 seg->s_as->a_proc->p_zone);
2522 2520 TRACE_3(TR_FAC_VM, TR_ANON_PROC, "anon proc:%p %lu %u",
2523 2521 seg, len, 0);
2524 2522 if (SEG_IS_PARTIAL_RESV(seg))
2525 2523 seg->s_as->a_resvsize -= svd->swresv;
2526 2524 svd->swresv = 0;
2527 2525 }
2528 2526 /*
2529 2527 * Release claim on vnode, credentials, and finally free the
2530 2528 * private data.
2531 2529 */
2532 2530 if (svd->vp != NULL) {
2533 2531 if (svd->type == MAP_SHARED)
2534 2532 lgrp_shm_policy_fini(NULL, svd->vp);
2535 2533 VN_RELE(svd->vp);
2536 2534 svd->vp = NULL;
2537 2535 }
2538 2536 crfree(svd->cred);
2539 2537 svd->pageprot = 0;
2540 2538 svd->pageadvice = 0;
2541 2539 svd->pageswap = 0;
2542 2540 svd->cred = NULL;
2543 2541
2544 2542 /*
2545 2543 * Take segfree_syncmtx lock to let segvn_reclaim() finish if it's
2546 2544 * still working with this segment without holding as lock (in case
2547 2545 * it's called by pcache async thread).
2548 2546 */
2549 2547 ASSERT(svd->softlockcnt == 0);
2550 2548 mutex_enter(&svd->segfree_syncmtx);
2551 2549 mutex_exit(&svd->segfree_syncmtx);
2552 2550
2553 2551 seg->s_data = NULL;
2554 2552 kmem_cache_free(segvn_cache, svd);
2555 2553 }
2556 2554
2557 2555 /*
2558 2556 * Do a F_SOFTUNLOCK call over the range requested. The range must have
2559 2557 * already been F_SOFTLOCK'ed.
2560 2558 * Caller must always match addr and len of a softunlock with a previous
2561 2559 * softlock with exactly the same addr and len.
2562 2560 */
2563 2561 static void
2564 2562 segvn_softunlock(struct seg *seg, caddr_t addr, size_t len, enum seg_rw rw)
2565 2563 {
2566 2564 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
2567 2565 page_t *pp;
2568 2566 caddr_t adr;
2569 2567 struct vnode *vp;
2570 2568 u_offset_t offset;
2571 2569 ulong_t anon_index;
2572 2570 struct anon_map *amp;
2573 2571 struct anon *ap = NULL;
2574 2572
2575 2573 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
2576 2574 ASSERT(SEGVN_LOCK_HELD(seg->s_as, &svd->lock));
2577 2575
2578 2576 if ((amp = svd->amp) != NULL)
2579 2577 anon_index = svd->anon_index + seg_page(seg, addr);
2580 2578
2581 2579 if (HAT_IS_REGION_COOKIE_VALID(svd->rcookie)) {
2582 2580 ASSERT(svd->tr_state == SEGVN_TR_OFF);
2583 2581 hat_unlock_region(seg->s_as->a_hat, addr, len, svd->rcookie);
2584 2582 } else {
2585 2583 hat_unlock(seg->s_as->a_hat, addr, len);
2586 2584 }
2587 2585 for (adr = addr; adr < addr + len; adr += PAGESIZE) {
2588 2586 if (amp != NULL) {
2589 2587 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
2590 2588 if ((ap = anon_get_ptr(amp->ahp, anon_index++))
2591 2589 != NULL) {
2592 2590 swap_xlate(ap, &vp, &offset);
2593 2591 } else {
2594 2592 vp = svd->vp;
2595 2593 offset = svd->offset +
2596 2594 (uintptr_t)(adr - seg->s_base);
2597 2595 }
2598 2596 ANON_LOCK_EXIT(&->a_rwlock);
2599 2597 } else {
2600 2598 vp = svd->vp;
2601 2599 offset = svd->offset +
2602 2600 (uintptr_t)(adr - seg->s_base);
2603 2601 }
2604 2602
2605 2603 /*
2606 2604 * Use page_find() instead of page_lookup() to
2607 2605 * find the page since we know that it is locked.
2608 2606 */
2609 2607 pp = page_find(vp, offset);
2610 2608 if (pp == NULL) {
2611 2609 panic(
2612 2610 "segvn_softunlock: addr %p, ap %p, vp %p, off %llx",
2613 2611 (void *)adr, (void *)ap, (void *)vp, offset);
2614 2612 /*NOTREACHED*/
2615 2613 }
2616 2614
2617 2615 if (rw == S_WRITE) {
2618 2616 hat_setrefmod(pp);
2619 2617 if (seg->s_as->a_vbits)
2620 2618 hat_setstat(seg->s_as, adr, PAGESIZE,
2621 2619 P_REF | P_MOD);
2622 2620 } else if (rw != S_OTHER) {
2623 2621 hat_setref(pp);
2624 2622 if (seg->s_as->a_vbits)
2625 2623 hat_setstat(seg->s_as, adr, PAGESIZE, P_REF);
2626 2624 }
2627 2625 TRACE_3(TR_FAC_VM, TR_SEGVN_FAULT,
2628 2626 "segvn_fault:pp %p vp %p offset %llx", pp, vp, offset);
2629 2627 page_unlock(pp);
2630 2628 }
2631 2629 ASSERT(svd->softlockcnt >= btop(len));
2632 2630 if (!atomic_add_long_nv((ulong_t *)&svd->softlockcnt, -btop(len))) {
2633 2631 /*
2634 2632 * All SOFTLOCKS are gone. Wakeup any waiting
2635 2633 * unmappers so they can try again to unmap.
2636 2634 * Check for waiters first without the mutex
2637 2635 * held so we don't always grab the mutex on
2638 2636 * softunlocks.
2639 2637 */
2640 2638 if (AS_ISUNMAPWAIT(seg->s_as)) {
2641 2639 mutex_enter(&seg->s_as->a_contents);
2642 2640 if (AS_ISUNMAPWAIT(seg->s_as)) {
2643 2641 AS_CLRUNMAPWAIT(seg->s_as);
2644 2642 cv_broadcast(&seg->s_as->a_cv);
2645 2643 }
2646 2644 mutex_exit(&seg->s_as->a_contents);
2647 2645 }
2648 2646 }
2649 2647 }
2650 2648
2651 2649 #define PAGE_HANDLED ((page_t *)-1)
2652 2650
2653 2651 /*
2654 2652 * Release all the pages in the NULL terminated ppp list
2655 2653 * which haven't already been converted to PAGE_HANDLED.
2656 2654 */
2657 2655 static void
2658 2656 segvn_pagelist_rele(page_t **ppp)
2659 2657 {
2660 2658 for (; *ppp != NULL; ppp++) {
2661 2659 if (*ppp != PAGE_HANDLED)
2662 2660 page_unlock(*ppp);
2663 2661 }
2664 2662 }
2665 2663
2666 2664 static int stealcow = 1;
2667 2665
2668 2666 /*
2669 2667 * Workaround for viking chip bug. See bug id 1220902.
2670 2668 * To fix this down in pagefault() would require importing so
2671 2669 * much as and segvn code as to be unmaintainable.
2672 2670 */
2673 2671 int enable_mbit_wa = 0;
2674 2672
2675 2673 /*
2676 2674 * Handles all the dirty work of getting the right
2677 2675 * anonymous pages and loading up the translations.
2678 2676 * This routine is called only from segvn_fault()
2679 2677 * when looping over the range of addresses requested.
2680 2678 *
2681 2679 * The basic algorithm here is:
2682 2680 * If this is an anon_zero case
2683 2681 * Call anon_zero to allocate page
2684 2682 * Load up translation
2685 2683 * Return
2686 2684 * endif
2687 2685 * If this is an anon page
2688 2686 * Use anon_getpage to get the page
2689 2687 * else
2690 2688 * Find page in pl[] list passed in
2691 2689 * endif
2692 2690 * If not a cow
2693 2691 * Load up the translation to the page
2694 2692 * return
2695 2693 * endif
2696 2694 * Call anon_private to handle cow
2697 2695 * Load up (writable) translation to new page
2698 2696 */
2699 2697 static faultcode_t
2700 2698 segvn_faultpage(
2701 2699 struct hat *hat, /* the hat to use for mapping */
2702 2700 struct seg *seg, /* seg_vn of interest */
2703 2701 caddr_t addr, /* address in as */
2704 2702 u_offset_t off, /* offset in vp */
2705 2703 struct vpage *vpage, /* pointer to vpage for vp, off */
2706 2704 page_t *pl[], /* object source page pointer */
2707 2705 uint_t vpprot, /* access allowed to object pages */
2708 2706 enum fault_type type, /* type of fault */
2709 2707 enum seg_rw rw, /* type of access at fault */
2710 2708 int brkcow) /* we may need to break cow */
2711 2709 {
2712 2710 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
2713 2711 page_t *pp, **ppp;
2714 2712 uint_t pageflags = 0;
2715 2713 page_t *anon_pl[1 + 1];
2716 2714 page_t *opp = NULL; /* original page */
2717 2715 uint_t prot;
2718 2716 int err;
2719 2717 int cow;
2720 2718 int claim;
2721 2719 int steal = 0;
2722 2720 ulong_t anon_index;
2723 2721 struct anon *ap, *oldap;
2724 2722 struct anon_map *amp;
2725 2723 int hat_flag = (type == F_SOFTLOCK) ? HAT_LOAD_LOCK : HAT_LOAD;
2726 2724 int anon_lock = 0;
2727 2725 anon_sync_obj_t cookie;
2728 2726
2729 2727 if (svd->flags & MAP_TEXT) {
2730 2728 hat_flag |= HAT_LOAD_TEXT;
2731 2729 }
2732 2730
2733 2731 ASSERT(SEGVN_READ_HELD(seg->s_as, &svd->lock));
2734 2732 ASSERT(seg->s_szc == 0);
2735 2733 ASSERT(svd->tr_state != SEGVN_TR_INIT);
2736 2734
2737 2735 /*
2738 2736 * Initialize protection value for this page.
2739 2737 * If we have per page protection values check it now.
2740 2738 */
2741 2739 if (svd->pageprot) {
2742 2740 uint_t protchk;
2743 2741
2744 2742 switch (rw) {
2745 2743 case S_READ:
2746 2744 protchk = PROT_READ;
2747 2745 break;
2748 2746 case S_WRITE:
2749 2747 protchk = PROT_WRITE;
2750 2748 break;
2751 2749 case S_EXEC:
2752 2750 protchk = PROT_EXEC;
2753 2751 break;
2754 2752 case S_OTHER:
2755 2753 default:
2756 2754 protchk = PROT_READ | PROT_WRITE | PROT_EXEC;
2757 2755 break;
2758 2756 }
2759 2757
2760 2758 prot = VPP_PROT(vpage);
2761 2759 if ((prot & protchk) == 0)
2762 2760 return (FC_PROT); /* illegal access type */
2763 2761 } else {
2764 2762 prot = svd->prot;
2765 2763 }
2766 2764
2767 2765 if (type == F_SOFTLOCK) {
2768 2766 atomic_inc_ulong((ulong_t *)&svd->softlockcnt);
2769 2767 }
2770 2768
2771 2769 /*
2772 2770 * Always acquire the anon array lock to prevent 2 threads from
2773 2771 * allocating separate anon slots for the same "addr".
2774 2772 */
2775 2773
2776 2774 if ((amp = svd->amp) != NULL) {
2777 2775 ASSERT(RW_READ_HELD(&->a_rwlock));
2778 2776 anon_index = svd->anon_index + seg_page(seg, addr);
2779 2777 anon_array_enter(amp, anon_index, &cookie);
2780 2778 anon_lock = 1;
2781 2779 }
2782 2780
2783 2781 if (svd->vp == NULL && amp != NULL) {
2784 2782 if ((ap = anon_get_ptr(amp->ahp, anon_index)) == NULL) {
2785 2783 /*
2786 2784 * Allocate a (normally) writable anonymous page of
2787 2785 * zeroes. If no advance reservations, reserve now.
2788 2786 */
2789 2787 if (svd->flags & MAP_NORESERVE) {
2790 2788 if (anon_resv_zone(ptob(1),
2791 2789 seg->s_as->a_proc->p_zone)) {
2792 2790 atomic_add_long(&svd->swresv, ptob(1));
2793 2791 atomic_add_long(&seg->s_as->a_resvsize,
2794 2792 ptob(1));
2795 2793 } else {
2796 2794 err = ENOMEM;
2797 2795 goto out;
2798 2796 }
2799 2797 }
2800 2798 if ((pp = anon_zero(seg, addr, &ap,
2801 2799 svd->cred)) == NULL) {
2802 2800 err = ENOMEM;
2803 2801 goto out; /* out of swap space */
2804 2802 }
2805 2803 /*
2806 2804 * Re-acquire the anon_map lock and
2807 2805 * initialize the anon array entry.
2808 2806 */
2809 2807 (void) anon_set_ptr(amp->ahp, anon_index, ap,
2810 2808 ANON_SLEEP);
2811 2809
2812 2810 ASSERT(pp->p_szc == 0);
2813 2811
2814 2812 /*
2815 2813 * Handle pages that have been marked for migration
2816 2814 */
2817 2815 if (lgrp_optimizations())
2818 2816 page_migrate(seg, addr, &pp, 1);
2819 2817
2820 2818 if (enable_mbit_wa) {
2821 2819 if (rw == S_WRITE)
2822 2820 hat_setmod(pp);
2823 2821 else if (!hat_ismod(pp))
2824 2822 prot &= ~PROT_WRITE;
2825 2823 }
2826 2824 /*
2827 2825 * If AS_PAGLCK is set in a_flags (via memcntl(2)
2828 2826 * with MC_LOCKAS, MCL_FUTURE) and this is a
2829 2827 * MAP_NORESERVE segment, we may need to
2830 2828 * permanently lock the page as it is being faulted
2831 2829 * for the first time. The following text applies
2832 2830 * only to MAP_NORESERVE segments:
2833 2831 *
2834 2832 * As per memcntl(2), if this segment was created
2835 2833 * after MCL_FUTURE was applied (a "future"
2836 2834 * segment), its pages must be locked. If this
2837 2835 * segment existed at MCL_FUTURE application (a
2838 2836 * "past" segment), the interface is unclear.
2839 2837 *
2840 2838 * We decide to lock only if vpage is present:
2841 2839 *
2842 2840 * - "future" segments will have a vpage array (see
2843 2841 * as_map), and so will be locked as required
2844 2842 *
2845 2843 * - "past" segments may not have a vpage array,
2846 2844 * depending on whether events (such as
2847 2845 * mprotect) have occurred. Locking if vpage
2848 2846 * exists will preserve legacy behavior. Not
2849 2847 * locking if vpage is absent, will not break
2850 2848 * the interface or legacy behavior. Note that
2851 2849 * allocating vpage here if it's absent requires
2852 2850 * upgrading the segvn reader lock, the cost of
2853 2851 * which does not seem worthwhile.
2854 2852 *
2855 2853 * Usually testing and setting VPP_ISPPLOCK and
2856 2854 * VPP_SETPPLOCK requires holding the segvn lock as
2857 2855 * writer, but in this case all readers are
2858 2856 * serializing on the anon array lock.
2859 2857 */
2860 2858 if (AS_ISPGLCK(seg->s_as) && vpage != NULL &&
2861 2859 (svd->flags & MAP_NORESERVE) &&
2862 2860 !VPP_ISPPLOCK(vpage)) {
2863 2861 proc_t *p = seg->s_as->a_proc;
2864 2862 ASSERT(svd->type == MAP_PRIVATE);
2865 2863 mutex_enter(&p->p_lock);
2866 2864 if (rctl_incr_locked_mem(p, NULL, PAGESIZE,
2867 2865 1) == 0) {
2868 2866 claim = VPP_PROT(vpage) & PROT_WRITE;
2869 2867 if (page_pp_lock(pp, claim, 0)) {
2870 2868 VPP_SETPPLOCK(vpage);
2871 2869 } else {
2872 2870 rctl_decr_locked_mem(p, NULL,
2873 2871 PAGESIZE, 1);
2874 2872 }
2875 2873 }
2876 2874 mutex_exit(&p->p_lock);
2877 2875 }
2878 2876
2879 2877 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
2880 2878 hat_memload(hat, addr, pp, prot, hat_flag);
2881 2879
2882 2880 if (!(hat_flag & HAT_LOAD_LOCK))
2883 2881 page_unlock(pp);
2884 2882
2885 2883 anon_array_exit(&cookie);
2886 2884 return (0);
2887 2885 }
2888 2886 }
2889 2887
2890 2888 /*
2891 2889 * Obtain the page structure via anon_getpage() if it is
2892 2890 * a private copy of an object (the result of a previous
2893 2891 * copy-on-write).
2894 2892 */
2895 2893 if (amp != NULL) {
2896 2894 if ((ap = anon_get_ptr(amp->ahp, anon_index)) != NULL) {
2897 2895 err = anon_getpage(&ap, &vpprot, anon_pl, PAGESIZE,
2898 2896 seg, addr, rw, svd->cred);
2899 2897 if (err)
2900 2898 goto out;
2901 2899
2902 2900 if (svd->type == MAP_SHARED) {
2903 2901 /*
2904 2902 * If this is a shared mapping to an
2905 2903 * anon_map, then ignore the write
2906 2904 * permissions returned by anon_getpage().
2907 2905 * They apply to the private mappings
2908 2906 * of this anon_map.
2909 2907 */
2910 2908 vpprot |= PROT_WRITE;
2911 2909 }
2912 2910 opp = anon_pl[0];
2913 2911 }
2914 2912 }
2915 2913
2916 2914 /*
2917 2915 * Search the pl[] list passed in if it is from the
2918 2916 * original object (i.e., not a private copy).
2919 2917 */
2920 2918 if (opp == NULL) {
2921 2919 /*
2922 2920 * Find original page. We must be bringing it in
2923 2921 * from the list in pl[].
2924 2922 */
2925 2923 for (ppp = pl; (opp = *ppp) != NULL; ppp++) {
2926 2924 if (opp == PAGE_HANDLED)
2927 2925 continue;
2928 2926 ASSERT(opp->p_vnode == svd->vp); /* XXX */
2929 2927 if (opp->p_offset == off)
2930 2928 break;
2931 2929 }
2932 2930 if (opp == NULL) {
2933 2931 panic("segvn_faultpage not found");
2934 2932 /*NOTREACHED*/
2935 2933 }
2936 2934 *ppp = PAGE_HANDLED;
2937 2935
2938 2936 }
2939 2937
2940 2938 ASSERT(PAGE_LOCKED(opp));
2941 2939
2942 2940 TRACE_3(TR_FAC_VM, TR_SEGVN_FAULT,
2943 2941 "segvn_fault:pp %p vp %p offset %llx", opp, NULL, 0);
2944 2942
2945 2943 /*
2946 2944 * The fault is treated as a copy-on-write fault if a
2947 2945 * write occurs on a private segment and the object
2948 2946 * page (i.e., mapping) is write protected. We assume
2949 2947 * that fatal protection checks have already been made.
2950 2948 */
2951 2949
2952 2950 if (brkcow) {
2953 2951 ASSERT(svd->tr_state == SEGVN_TR_OFF);
2954 2952 cow = !(vpprot & PROT_WRITE);
2955 2953 } else if (svd->tr_state == SEGVN_TR_ON) {
2956 2954 /*
2957 2955 * If we are doing text replication COW on first touch.
2958 2956 */
2959 2957 ASSERT(amp != NULL);
2960 2958 ASSERT(svd->vp != NULL);
2961 2959 ASSERT(rw != S_WRITE);
2962 2960 cow = (ap == NULL);
2963 2961 } else {
2964 2962 cow = 0;
2965 2963 }
2966 2964
2967 2965 /*
2968 2966 * If not a copy-on-write case load the translation
2969 2967 * and return.
2970 2968 */
2971 2969 if (cow == 0) {
2972 2970
2973 2971 /*
2974 2972 * Handle pages that have been marked for migration
2975 2973 */
2976 2974 if (lgrp_optimizations())
2977 2975 page_migrate(seg, addr, &opp, 1);
2978 2976
2979 2977 if (IS_VMODSORT(opp->p_vnode) || enable_mbit_wa) {
2980 2978 if (rw == S_WRITE)
2981 2979 hat_setmod(opp);
2982 2980 else if (rw != S_OTHER && !hat_ismod(opp))
2983 2981 prot &= ~PROT_WRITE;
2984 2982 }
2985 2983
2986 2984 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE ||
2987 2985 (!svd->pageprot && svd->prot == (prot & vpprot)));
2988 2986 ASSERT(amp == NULL ||
2989 2987 svd->rcookie == HAT_INVALID_REGION_COOKIE);
2990 2988 hat_memload_region(hat, addr, opp, prot & vpprot, hat_flag,
2991 2989 svd->rcookie);
2992 2990
2993 2991 if (!(hat_flag & HAT_LOAD_LOCK))
2994 2992 page_unlock(opp);
2995 2993
2996 2994 if (anon_lock) {
2997 2995 anon_array_exit(&cookie);
2998 2996 }
2999 2997 return (0);
3000 2998 }
3001 2999
3002 3000 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
3003 3001
3004 3002 hat_setref(opp);
3005 3003
3006 3004 ASSERT(amp != NULL && anon_lock);
3007 3005
3008 3006 /*
3009 3007 * Steal the page only if it isn't a private page
3010 3008 * since stealing a private page is not worth the effort.
3011 3009 */
3012 3010 if ((ap = anon_get_ptr(amp->ahp, anon_index)) == NULL)
3013 3011 steal = 1;
3014 3012
3015 3013 /*
3016 3014 * Steal the original page if the following conditions are true:
3017 3015 *
3018 3016 * We are low on memory, the page is not private, page is not large,
3019 3017 * not shared, not modified, not `locked' or if we have it `locked'
3020 3018 * (i.e., p_cowcnt == 1 and p_lckcnt == 0, which also implies
3021 3019 * that the page is not shared) and if it doesn't have any
3022 3020 * translations. page_struct_lock isn't needed to look at p_cowcnt
3023 3021 * and p_lckcnt because we first get exclusive lock on page.
3024 3022 */
3025 3023 (void) hat_pagesync(opp, HAT_SYNC_DONTZERO | HAT_SYNC_STOPON_MOD);
3026 3024
3027 3025 if (stealcow && freemem < minfree && steal && opp->p_szc == 0 &&
3028 3026 page_tryupgrade(opp) && !hat_ismod(opp) &&
3029 3027 ((opp->p_lckcnt == 0 && opp->p_cowcnt == 0) ||
3030 3028 (opp->p_lckcnt == 0 && opp->p_cowcnt == 1 &&
3031 3029 vpage != NULL && VPP_ISPPLOCK(vpage)))) {
3032 3030 /*
3033 3031 * Check if this page has other translations
3034 3032 * after unloading our translation.
3035 3033 */
3036 3034 if (hat_page_is_mapped(opp)) {
3037 3035 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
3038 3036 hat_unload(seg->s_as->a_hat, addr, PAGESIZE,
3039 3037 HAT_UNLOAD);
3040 3038 }
3041 3039
3042 3040 /*
3043 3041 * hat_unload() might sync back someone else's recent
3044 3042 * modification, so check again.
3045 3043 */
3046 3044 if (!hat_ismod(opp) && !hat_page_is_mapped(opp))
3047 3045 pageflags |= STEAL_PAGE;
3048 3046 }
3049 3047
3050 3048 /*
3051 3049 * If we have a vpage pointer, see if it indicates that we have
3052 3050 * ``locked'' the page we map -- if so, tell anon_private to
3053 3051 * transfer the locking resource to the new page.
3054 3052 *
3055 3053 * See Statement at the beginning of segvn_lockop regarding
3056 3054 * the way lockcnts/cowcnts are handled during COW.
3057 3055 *
3058 3056 */
3059 3057 if (vpage != NULL && VPP_ISPPLOCK(vpage))
3060 3058 pageflags |= LOCK_PAGE;
3061 3059
3062 3060 /*
3063 3061 * Allocate a private page and perform the copy.
3064 3062 * For MAP_NORESERVE reserve swap space now, unless this
3065 3063 * is a cow fault on an existing anon page in which case
3066 3064 * MAP_NORESERVE will have made advance reservations.
3067 3065 */
3068 3066 if ((svd->flags & MAP_NORESERVE) && (ap == NULL)) {
3069 3067 if (anon_resv_zone(ptob(1), seg->s_as->a_proc->p_zone)) {
3070 3068 atomic_add_long(&svd->swresv, ptob(1));
3071 3069 atomic_add_long(&seg->s_as->a_resvsize, ptob(1));
3072 3070 } else {
3073 3071 page_unlock(opp);
3074 3072 err = ENOMEM;
3075 3073 goto out;
3076 3074 }
3077 3075 }
3078 3076 oldap = ap;
3079 3077 pp = anon_private(&ap, seg, addr, prot, opp, pageflags, svd->cred);
3080 3078 if (pp == NULL) {
3081 3079 err = ENOMEM; /* out of swap space */
3082 3080 goto out;
3083 3081 }
3084 3082
3085 3083 /*
3086 3084 * If we copied away from an anonymous page, then
3087 3085 * we are one step closer to freeing up an anon slot.
3088 3086 *
3089 3087 * NOTE: The original anon slot must be released while
3090 3088 * holding the "anon_map" lock. This is necessary to prevent
3091 3089 * other threads from obtaining a pointer to the anon slot
3092 3090 * which may be freed if its "refcnt" is 1.
3093 3091 */
3094 3092 if (oldap != NULL)
3095 3093 anon_decref(oldap);
3096 3094
3097 3095 (void) anon_set_ptr(amp->ahp, anon_index, ap, ANON_SLEEP);
3098 3096
3099 3097 /*
3100 3098 * Handle pages that have been marked for migration
3101 3099 */
3102 3100 if (lgrp_optimizations())
3103 3101 page_migrate(seg, addr, &pp, 1);
3104 3102
3105 3103 ASSERT(pp->p_szc == 0);
3106 3104
3107 3105 ASSERT(!IS_VMODSORT(pp->p_vnode));
3108 3106 if (enable_mbit_wa) {
3109 3107 if (rw == S_WRITE)
3110 3108 hat_setmod(pp);
3111 3109 else if (!hat_ismod(pp))
3112 3110 prot &= ~PROT_WRITE;
3113 3111 }
3114 3112
3115 3113 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
3116 3114 hat_memload(hat, addr, pp, prot, hat_flag);
3117 3115
3118 3116 if (!(hat_flag & HAT_LOAD_LOCK))
3119 3117 page_unlock(pp);
3120 3118
3121 3119 ASSERT(anon_lock);
3122 3120 anon_array_exit(&cookie);
3123 3121 return (0);
3124 3122 out:
3125 3123 if (anon_lock)
3126 3124 anon_array_exit(&cookie);
3127 3125
3128 3126 if (type == F_SOFTLOCK) {
3129 3127 atomic_dec_ulong((ulong_t *)&svd->softlockcnt);
3130 3128 }
3131 3129 return (FC_MAKE_ERR(err));
3132 3130 }
3133 3131
3134 3132 /*
3135 3133 * relocate a bunch of smaller targ pages into one large repl page. all targ
3136 3134 * pages must be complete pages smaller than replacement pages.
3137 3135 * it's assumed that no page's szc can change since they are all PAGESIZE or
3138 3136 * complete large pages locked SHARED.
3139 3137 */
3140 3138 static void
3141 3139 segvn_relocate_pages(page_t **targ, page_t *replacement)
3142 3140 {
3143 3141 page_t *pp;
3144 3142 pgcnt_t repl_npgs, curnpgs;
3145 3143 pgcnt_t i;
3146 3144 uint_t repl_szc = replacement->p_szc;
3147 3145 page_t *first_repl = replacement;
3148 3146 page_t *repl;
3149 3147 spgcnt_t npgs;
3150 3148
3151 3149 VM_STAT_ADD(segvnvmstats.relocatepages[0]);
3152 3150
3153 3151 ASSERT(repl_szc != 0);
3154 3152 npgs = repl_npgs = page_get_pagecnt(repl_szc);
3155 3153
3156 3154 i = 0;
3157 3155 while (repl_npgs) {
3158 3156 spgcnt_t nreloc;
3159 3157 int err;
3160 3158 ASSERT(replacement != NULL);
3161 3159 pp = targ[i];
3162 3160 ASSERT(pp->p_szc < repl_szc);
3163 3161 ASSERT(PAGE_EXCL(pp));
3164 3162 ASSERT(!PP_ISFREE(pp));
3165 3163 curnpgs = page_get_pagecnt(pp->p_szc);
3166 3164 if (curnpgs == 1) {
3167 3165 VM_STAT_ADD(segvnvmstats.relocatepages[1]);
3168 3166 repl = replacement;
3169 3167 page_sub(&replacement, repl);
3170 3168 ASSERT(PAGE_EXCL(repl));
3171 3169 ASSERT(!PP_ISFREE(repl));
3172 3170 ASSERT(repl->p_szc == repl_szc);
3173 3171 } else {
3174 3172 page_t *repl_savepp;
3175 3173 int j;
3176 3174 VM_STAT_ADD(segvnvmstats.relocatepages[2]);
3177 3175 repl_savepp = replacement;
3178 3176 for (j = 0; j < curnpgs; j++) {
3179 3177 repl = replacement;
3180 3178 page_sub(&replacement, repl);
3181 3179 ASSERT(PAGE_EXCL(repl));
3182 3180 ASSERT(!PP_ISFREE(repl));
3183 3181 ASSERT(repl->p_szc == repl_szc);
3184 3182 ASSERT(page_pptonum(targ[i + j]) ==
3185 3183 page_pptonum(targ[i]) + j);
3186 3184 }
3187 3185 repl = repl_savepp;
3188 3186 ASSERT(IS_P2ALIGNED(page_pptonum(repl), curnpgs));
3189 3187 }
3190 3188 err = page_relocate(&pp, &repl, 0, 1, &nreloc, NULL);
3191 3189 if (err || nreloc != curnpgs) {
3192 3190 panic("segvn_relocate_pages: "
3193 3191 "page_relocate failed err=%d curnpgs=%ld "
3194 3192 "nreloc=%ld", err, curnpgs, nreloc);
3195 3193 }
3196 3194 ASSERT(curnpgs <= repl_npgs);
3197 3195 repl_npgs -= curnpgs;
3198 3196 i += curnpgs;
3199 3197 }
3200 3198 ASSERT(replacement == NULL);
3201 3199
3202 3200 repl = first_repl;
3203 3201 repl_npgs = npgs;
3204 3202 for (i = 0; i < repl_npgs; i++) {
3205 3203 ASSERT(PAGE_EXCL(repl));
3206 3204 ASSERT(!PP_ISFREE(repl));
3207 3205 targ[i] = repl;
3208 3206 page_downgrade(targ[i]);
3209 3207 repl++;
3210 3208 }
3211 3209 }
3212 3210
3213 3211 /*
3214 3212 * Check if all pages in ppa array are complete smaller than szc pages and
3215 3213 * their roots will still be aligned relative to their current size if the
3216 3214 * entire ppa array is relocated into one szc page. If these conditions are
3217 3215 * not met return 0.
3218 3216 *
3219 3217 * If all pages are properly aligned attempt to upgrade their locks
3220 3218 * to exclusive mode. If it fails set *upgrdfail to 1 and return 0.
3221 3219 * upgrdfail was set to 0 by caller.
3222 3220 *
3223 3221 * Return 1 if all pages are aligned and locked exclusively.
3224 3222 *
3225 3223 * If all pages in ppa array happen to be physically contiguous to make one
3226 3224 * szc page and all exclusive locks are successfully obtained promote the page
3227 3225 * size to szc and set *pszc to szc. Return 1 with pages locked shared.
3228 3226 */
3229 3227 static int
3230 3228 segvn_full_szcpages(page_t **ppa, uint_t szc, int *upgrdfail, uint_t *pszc)
3231 3229 {
3232 3230 page_t *pp;
3233 3231 pfn_t pfn;
3234 3232 pgcnt_t totnpgs = page_get_pagecnt(szc);
3235 3233 pfn_t first_pfn;
3236 3234 int contig = 1;
3237 3235 pgcnt_t i;
3238 3236 pgcnt_t j;
3239 3237 uint_t curszc;
3240 3238 pgcnt_t curnpgs;
3241 3239 int root = 0;
3242 3240
3243 3241 ASSERT(szc > 0);
3244 3242
3245 3243 VM_STAT_ADD(segvnvmstats.fullszcpages[0]);
3246 3244
3247 3245 for (i = 0; i < totnpgs; i++) {
3248 3246 pp = ppa[i];
3249 3247 ASSERT(PAGE_SHARED(pp));
3250 3248 ASSERT(!PP_ISFREE(pp));
3251 3249 pfn = page_pptonum(pp);
3252 3250 if (i == 0) {
3253 3251 if (!IS_P2ALIGNED(pfn, totnpgs)) {
3254 3252 contig = 0;
3255 3253 } else {
3256 3254 first_pfn = pfn;
3257 3255 }
3258 3256 } else if (contig && pfn != first_pfn + i) {
3259 3257 contig = 0;
3260 3258 }
3261 3259 if (pp->p_szc == 0) {
3262 3260 if (root) {
3263 3261 VM_STAT_ADD(segvnvmstats.fullszcpages[1]);
3264 3262 return (0);
3265 3263 }
3266 3264 } else if (!root) {
3267 3265 if ((curszc = pp->p_szc) >= szc) {
3268 3266 VM_STAT_ADD(segvnvmstats.fullszcpages[2]);
3269 3267 return (0);
3270 3268 }
3271 3269 if (curszc == 0) {
3272 3270 /*
3273 3271 * p_szc changed means we don't have all pages
3274 3272 * locked. return failure.
3275 3273 */
3276 3274 VM_STAT_ADD(segvnvmstats.fullszcpages[3]);
3277 3275 return (0);
3278 3276 }
3279 3277 curnpgs = page_get_pagecnt(curszc);
3280 3278 if (!IS_P2ALIGNED(pfn, curnpgs) ||
3281 3279 !IS_P2ALIGNED(i, curnpgs)) {
3282 3280 VM_STAT_ADD(segvnvmstats.fullszcpages[4]);
3283 3281 return (0);
3284 3282 }
3285 3283 root = 1;
3286 3284 } else {
3287 3285 ASSERT(i > 0);
3288 3286 VM_STAT_ADD(segvnvmstats.fullszcpages[5]);
3289 3287 if (pp->p_szc != curszc) {
3290 3288 VM_STAT_ADD(segvnvmstats.fullszcpages[6]);
3291 3289 return (0);
3292 3290 }
3293 3291 if (pfn - 1 != page_pptonum(ppa[i - 1])) {
3294 3292 panic("segvn_full_szcpages: "
3295 3293 "large page not physically contiguous");
3296 3294 }
3297 3295 if (P2PHASE(pfn, curnpgs) == curnpgs - 1) {
3298 3296 root = 0;
3299 3297 }
3300 3298 }
3301 3299 }
3302 3300
3303 3301 for (i = 0; i < totnpgs; i++) {
3304 3302 ASSERT(ppa[i]->p_szc < szc);
3305 3303 if (!page_tryupgrade(ppa[i])) {
3306 3304 for (j = 0; j < i; j++) {
3307 3305 page_downgrade(ppa[j]);
3308 3306 }
3309 3307 *pszc = ppa[i]->p_szc;
3310 3308 *upgrdfail = 1;
3311 3309 VM_STAT_ADD(segvnvmstats.fullszcpages[7]);
3312 3310 return (0);
3313 3311 }
3314 3312 }
3315 3313
3316 3314 /*
3317 3315 * When a page is put a free cachelist its szc is set to 0. if file
3318 3316 * system reclaimed pages from cachelist targ pages will be physically
3319 3317 * contiguous with 0 p_szc. in this case just upgrade szc of targ
3320 3318 * pages without any relocations.
3321 3319 * To avoid any hat issues with previous small mappings
3322 3320 * hat_pageunload() the target pages first.
3323 3321 */
3324 3322 if (contig) {
3325 3323 VM_STAT_ADD(segvnvmstats.fullszcpages[8]);
3326 3324 for (i = 0; i < totnpgs; i++) {
3327 3325 (void) hat_pageunload(ppa[i], HAT_FORCE_PGUNLOAD);
3328 3326 }
3329 3327 for (i = 0; i < totnpgs; i++) {
3330 3328 ppa[i]->p_szc = szc;
3331 3329 }
3332 3330 for (i = 0; i < totnpgs; i++) {
3333 3331 ASSERT(PAGE_EXCL(ppa[i]));
3334 3332 page_downgrade(ppa[i]);
3335 3333 }
3336 3334 if (pszc != NULL) {
3337 3335 *pszc = szc;
3338 3336 }
3339 3337 }
3340 3338 VM_STAT_ADD(segvnvmstats.fullszcpages[9]);
3341 3339 return (1);
3342 3340 }
3343 3341
3344 3342 /*
3345 3343 * Create physically contiguous pages for [vp, off] - [vp, off +
3346 3344 * page_size(szc)) range and for private segment return them in ppa array.
3347 3345 * Pages are created either via IO or relocations.
3348 3346 *
3349 3347 * Return 1 on success and 0 on failure.
3350 3348 *
3351 3349 * If physically contiguous pages already exist for this range return 1 without
3352 3350 * filling ppa array. Caller initializes ppa[0] as NULL to detect that ppa
3353 3351 * array wasn't filled. In this case caller fills ppa array via VOP_GETPAGE().
3354 3352 */
3355 3353
3356 3354 static int
3357 3355 segvn_fill_vp_pages(struct segvn_data *svd, vnode_t *vp, u_offset_t off,
3358 3356 uint_t szc, page_t **ppa, page_t **ppplist, uint_t *ret_pszc,
3359 3357 int *downsize)
3360 3358
3361 3359 {
3362 3360 page_t *pplist = *ppplist;
3363 3361 size_t pgsz = page_get_pagesize(szc);
3364 3362 pgcnt_t pages = btop(pgsz);
3365 3363 ulong_t start_off = off;
3366 3364 u_offset_t eoff = off + pgsz;
3367 3365 spgcnt_t nreloc;
3368 3366 u_offset_t io_off = off;
3369 3367 size_t io_len;
3370 3368 page_t *io_pplist = NULL;
3371 3369 page_t *done_pplist = NULL;
3372 3370 pgcnt_t pgidx = 0;
3373 3371 page_t *pp;
3374 3372 page_t *newpp;
3375 3373 page_t *targpp;
3376 3374 int io_err = 0;
3377 3375 int i;
3378 3376 pfn_t pfn;
3379 3377 ulong_t ppages;
3380 3378 page_t *targ_pplist = NULL;
3381 3379 page_t *repl_pplist = NULL;
3382 3380 page_t *tmp_pplist;
3383 3381 int nios = 0;
3384 3382 uint_t pszc;
3385 3383 struct vattr va;
3386 3384
3387 3385 VM_STAT_ADD(segvnvmstats.fill_vp_pages[0]);
3388 3386
3389 3387 ASSERT(szc != 0);
3390 3388 ASSERT(pplist->p_szc == szc);
3391 3389
3392 3390 /*
3393 3391 * downsize will be set to 1 only if we fail to lock pages. this will
3394 3392 * allow subsequent faults to try to relocate the page again. If we
3395 3393 * fail due to misalignment don't downsize and let the caller map the
3396 3394 * whole region with small mappings to avoid more faults into the area
3397 3395 * where we can't get large pages anyway.
3398 3396 */
3399 3397 *downsize = 0;
3400 3398
3401 3399 while (off < eoff) {
3402 3400 newpp = pplist;
3403 3401 ASSERT(newpp != NULL);
3404 3402 ASSERT(PAGE_EXCL(newpp));
3405 3403 ASSERT(!PP_ISFREE(newpp));
3406 3404 /*
3407 3405 * we pass NULL for nrelocp to page_lookup_create()
3408 3406 * so that it doesn't relocate. We relocate here
3409 3407 * later only after we make sure we can lock all
3410 3408 * pages in the range we handle and they are all
3411 3409 * aligned.
3412 3410 */
3413 3411 pp = page_lookup_create(vp, off, SE_SHARED, newpp, NULL, 0);
3414 3412 ASSERT(pp != NULL);
3415 3413 ASSERT(!PP_ISFREE(pp));
3416 3414 ASSERT(pp->p_vnode == vp);
3417 3415 ASSERT(pp->p_offset == off);
3418 3416 if (pp == newpp) {
3419 3417 VM_STAT_ADD(segvnvmstats.fill_vp_pages[1]);
3420 3418 page_sub(&pplist, pp);
3421 3419 ASSERT(PAGE_EXCL(pp));
3422 3420 ASSERT(page_iolock_assert(pp));
3423 3421 page_list_concat(&io_pplist, &pp);
3424 3422 off += PAGESIZE;
3425 3423 continue;
3426 3424 }
3427 3425 VM_STAT_ADD(segvnvmstats.fill_vp_pages[2]);
3428 3426 pfn = page_pptonum(pp);
3429 3427 pszc = pp->p_szc;
3430 3428 if (pszc >= szc && targ_pplist == NULL && io_pplist == NULL &&
3431 3429 IS_P2ALIGNED(pfn, pages)) {
3432 3430 ASSERT(repl_pplist == NULL);
3433 3431 ASSERT(done_pplist == NULL);
3434 3432 ASSERT(pplist == *ppplist);
3435 3433 page_unlock(pp);
3436 3434 page_free_replacement_page(pplist);
3437 3435 page_create_putback(pages);
3438 3436 *ppplist = NULL;
3439 3437 VM_STAT_ADD(segvnvmstats.fill_vp_pages[3]);
3440 3438 return (1);
3441 3439 }
3442 3440 if (pszc >= szc) {
3443 3441 page_unlock(pp);
3444 3442 segvn_faultvnmpss_align_err1++;
3445 3443 goto out;
3446 3444 }
3447 3445 ppages = page_get_pagecnt(pszc);
3448 3446 if (!IS_P2ALIGNED(pfn, ppages)) {
3449 3447 ASSERT(pszc > 0);
3450 3448 /*
3451 3449 * sizing down to pszc won't help.
3452 3450 */
3453 3451 page_unlock(pp);
3454 3452 segvn_faultvnmpss_align_err2++;
3455 3453 goto out;
3456 3454 }
3457 3455 pfn = page_pptonum(newpp);
3458 3456 if (!IS_P2ALIGNED(pfn, ppages)) {
3459 3457 ASSERT(pszc > 0);
3460 3458 /*
3461 3459 * sizing down to pszc won't help.
3462 3460 */
3463 3461 page_unlock(pp);
3464 3462 segvn_faultvnmpss_align_err3++;
3465 3463 goto out;
3466 3464 }
3467 3465 if (!PAGE_EXCL(pp)) {
3468 3466 VM_STAT_ADD(segvnvmstats.fill_vp_pages[4]);
3469 3467 page_unlock(pp);
3470 3468 *downsize = 1;
3471 3469 *ret_pszc = pp->p_szc;
3472 3470 goto out;
3473 3471 }
3474 3472 targpp = pp;
3475 3473 if (io_pplist != NULL) {
3476 3474 VM_STAT_ADD(segvnvmstats.fill_vp_pages[5]);
3477 3475 io_len = off - io_off;
3478 3476 /*
3479 3477 * Some file systems like NFS don't check EOF
3480 3478 * conditions in VOP_PAGEIO(). Check it here
3481 3479 * now that pages are locked SE_EXCL. Any file
3482 3480 * truncation will wait until the pages are
3483 3481 * unlocked so no need to worry that file will
3484 3482 * be truncated after we check its size here.
3485 3483 * XXX fix NFS to remove this check.
3486 3484 */
3487 3485 va.va_mask = AT_SIZE;
3488 3486 if (VOP_GETATTR(vp, &va, ATTR_HINT, svd->cred, NULL)) {
3489 3487 VM_STAT_ADD(segvnvmstats.fill_vp_pages[6]);
3490 3488 page_unlock(targpp);
3491 3489 goto out;
3492 3490 }
3493 3491 if (btopr(va.va_size) < btopr(io_off + io_len)) {
3494 3492 VM_STAT_ADD(segvnvmstats.fill_vp_pages[7]);
3495 3493 *downsize = 1;
3496 3494 *ret_pszc = 0;
3497 3495 page_unlock(targpp);
3498 3496 goto out;
3499 3497 }
3500 3498 io_err = VOP_PAGEIO(vp, io_pplist, io_off, io_len,
3501 3499 B_READ, svd->cred, NULL);
3502 3500 if (io_err) {
3503 3501 VM_STAT_ADD(segvnvmstats.fill_vp_pages[8]);
3504 3502 page_unlock(targpp);
3505 3503 if (io_err == EDEADLK) {
3506 3504 segvn_vmpss_pageio_deadlk_err++;
3507 3505 }
3508 3506 goto out;
3509 3507 }
3510 3508 nios++;
3511 3509 VM_STAT_ADD(segvnvmstats.fill_vp_pages[9]);
3512 3510 while (io_pplist != NULL) {
3513 3511 pp = io_pplist;
3514 3512 page_sub(&io_pplist, pp);
3515 3513 ASSERT(page_iolock_assert(pp));
3516 3514 page_io_unlock(pp);
3517 3515 pgidx = (pp->p_offset - start_off) >>
3518 3516 PAGESHIFT;
3519 3517 ASSERT(pgidx < pages);
3520 3518 ppa[pgidx] = pp;
3521 3519 page_list_concat(&done_pplist, &pp);
3522 3520 }
3523 3521 }
3524 3522 pp = targpp;
3525 3523 ASSERT(PAGE_EXCL(pp));
3526 3524 ASSERT(pp->p_szc <= pszc);
3527 3525 if (pszc != 0 && !group_page_trylock(pp, SE_EXCL)) {
3528 3526 VM_STAT_ADD(segvnvmstats.fill_vp_pages[10]);
3529 3527 page_unlock(pp);
3530 3528 *downsize = 1;
3531 3529 *ret_pszc = pp->p_szc;
3532 3530 goto out;
3533 3531 }
3534 3532 VM_STAT_ADD(segvnvmstats.fill_vp_pages[11]);
3535 3533 /*
3536 3534 * page szc chould have changed before the entire group was
3537 3535 * locked. reread page szc.
3538 3536 */
3539 3537 pszc = pp->p_szc;
3540 3538 ppages = page_get_pagecnt(pszc);
3541 3539
3542 3540 /* link just the roots */
3543 3541 page_list_concat(&targ_pplist, &pp);
3544 3542 page_sub(&pplist, newpp);
3545 3543 page_list_concat(&repl_pplist, &newpp);
3546 3544 off += PAGESIZE;
3547 3545 while (--ppages != 0) {
3548 3546 newpp = pplist;
3549 3547 page_sub(&pplist, newpp);
3550 3548 off += PAGESIZE;
3551 3549 }
3552 3550 io_off = off;
3553 3551 }
3554 3552 if (io_pplist != NULL) {
3555 3553 VM_STAT_ADD(segvnvmstats.fill_vp_pages[12]);
3556 3554 io_len = eoff - io_off;
3557 3555 va.va_mask = AT_SIZE;
3558 3556 if (VOP_GETATTR(vp, &va, ATTR_HINT, svd->cred, NULL) != 0) {
3559 3557 VM_STAT_ADD(segvnvmstats.fill_vp_pages[13]);
3560 3558 goto out;
3561 3559 }
3562 3560 if (btopr(va.va_size) < btopr(io_off + io_len)) {
3563 3561 VM_STAT_ADD(segvnvmstats.fill_vp_pages[14]);
3564 3562 *downsize = 1;
3565 3563 *ret_pszc = 0;
3566 3564 goto out;
3567 3565 }
3568 3566 io_err = VOP_PAGEIO(vp, io_pplist, io_off, io_len,
3569 3567 B_READ, svd->cred, NULL);
3570 3568 if (io_err) {
3571 3569 VM_STAT_ADD(segvnvmstats.fill_vp_pages[15]);
3572 3570 if (io_err == EDEADLK) {
3573 3571 segvn_vmpss_pageio_deadlk_err++;
3574 3572 }
3575 3573 goto out;
3576 3574 }
3577 3575 nios++;
3578 3576 while (io_pplist != NULL) {
3579 3577 pp = io_pplist;
3580 3578 page_sub(&io_pplist, pp);
3581 3579 ASSERT(page_iolock_assert(pp));
3582 3580 page_io_unlock(pp);
3583 3581 pgidx = (pp->p_offset - start_off) >> PAGESHIFT;
3584 3582 ASSERT(pgidx < pages);
3585 3583 ppa[pgidx] = pp;
3586 3584 }
3587 3585 }
3588 3586 /*
3589 3587 * we're now bound to succeed or panic.
3590 3588 * remove pages from done_pplist. it's not needed anymore.
3591 3589 */
3592 3590 while (done_pplist != NULL) {
3593 3591 pp = done_pplist;
3594 3592 page_sub(&done_pplist, pp);
3595 3593 }
3596 3594 VM_STAT_ADD(segvnvmstats.fill_vp_pages[16]);
3597 3595 ASSERT(pplist == NULL);
3598 3596 *ppplist = NULL;
3599 3597 while (targ_pplist != NULL) {
3600 3598 int ret;
3601 3599 VM_STAT_ADD(segvnvmstats.fill_vp_pages[17]);
3602 3600 ASSERT(repl_pplist);
3603 3601 pp = targ_pplist;
3604 3602 page_sub(&targ_pplist, pp);
3605 3603 pgidx = (pp->p_offset - start_off) >> PAGESHIFT;
3606 3604 newpp = repl_pplist;
3607 3605 page_sub(&repl_pplist, newpp);
3608 3606 #ifdef DEBUG
3609 3607 pfn = page_pptonum(pp);
3610 3608 pszc = pp->p_szc;
3611 3609 ppages = page_get_pagecnt(pszc);
3612 3610 ASSERT(IS_P2ALIGNED(pfn, ppages));
3613 3611 pfn = page_pptonum(newpp);
3614 3612 ASSERT(IS_P2ALIGNED(pfn, ppages));
3615 3613 ASSERT(P2PHASE(pfn, pages) == pgidx);
3616 3614 #endif
3617 3615 nreloc = 0;
3618 3616 ret = page_relocate(&pp, &newpp, 0, 1, &nreloc, NULL);
3619 3617 if (ret != 0 || nreloc == 0) {
3620 3618 panic("segvn_fill_vp_pages: "
3621 3619 "page_relocate failed");
3622 3620 }
3623 3621 pp = newpp;
3624 3622 while (nreloc-- != 0) {
3625 3623 ASSERT(PAGE_EXCL(pp));
3626 3624 ASSERT(pp->p_vnode == vp);
3627 3625 ASSERT(pgidx ==
3628 3626 ((pp->p_offset - start_off) >> PAGESHIFT));
3629 3627 ppa[pgidx++] = pp;
3630 3628 pp++;
3631 3629 }
3632 3630 }
3633 3631
3634 3632 if (svd->type == MAP_PRIVATE) {
3635 3633 VM_STAT_ADD(segvnvmstats.fill_vp_pages[18]);
3636 3634 for (i = 0; i < pages; i++) {
3637 3635 ASSERT(ppa[i] != NULL);
3638 3636 ASSERT(PAGE_EXCL(ppa[i]));
3639 3637 ASSERT(ppa[i]->p_vnode == vp);
3640 3638 ASSERT(ppa[i]->p_offset ==
3641 3639 start_off + (i << PAGESHIFT));
3642 3640 page_downgrade(ppa[i]);
3643 3641 }
3644 3642 ppa[pages] = NULL;
3645 3643 } else {
3646 3644 VM_STAT_ADD(segvnvmstats.fill_vp_pages[19]);
3647 3645 /*
3648 3646 * the caller will still call VOP_GETPAGE() for shared segments
3649 3647 * to check FS write permissions. For private segments we map
3650 3648 * file read only anyway. so no VOP_GETPAGE is needed.
3651 3649 */
3652 3650 for (i = 0; i < pages; i++) {
3653 3651 ASSERT(ppa[i] != NULL);
3654 3652 ASSERT(PAGE_EXCL(ppa[i]));
3655 3653 ASSERT(ppa[i]->p_vnode == vp);
3656 3654 ASSERT(ppa[i]->p_offset ==
3657 3655 start_off + (i << PAGESHIFT));
3658 3656 page_unlock(ppa[i]);
3659 3657 }
3660 3658 ppa[0] = NULL;
3661 3659 }
3662 3660
3663 3661 return (1);
3664 3662 out:
3665 3663 /*
3666 3664 * Do the cleanup. Unlock target pages we didn't relocate. They are
3667 3665 * linked on targ_pplist by root pages. reassemble unused replacement
3668 3666 * and io pages back to pplist.
3669 3667 */
3670 3668 if (io_pplist != NULL) {
3671 3669 VM_STAT_ADD(segvnvmstats.fill_vp_pages[20]);
3672 3670 pp = io_pplist;
3673 3671 do {
3674 3672 ASSERT(pp->p_vnode == vp);
3675 3673 ASSERT(pp->p_offset == io_off);
3676 3674 ASSERT(page_iolock_assert(pp));
3677 3675 page_io_unlock(pp);
3678 3676 page_hashout(pp, NULL);
3679 3677 io_off += PAGESIZE;
3680 3678 } while ((pp = pp->p_next) != io_pplist);
3681 3679 page_list_concat(&io_pplist, &pplist);
3682 3680 pplist = io_pplist;
3683 3681 }
3684 3682 tmp_pplist = NULL;
3685 3683 while (targ_pplist != NULL) {
3686 3684 VM_STAT_ADD(segvnvmstats.fill_vp_pages[21]);
3687 3685 pp = targ_pplist;
3688 3686 ASSERT(PAGE_EXCL(pp));
3689 3687 page_sub(&targ_pplist, pp);
3690 3688
3691 3689 pszc = pp->p_szc;
3692 3690 ppages = page_get_pagecnt(pszc);
3693 3691 ASSERT(IS_P2ALIGNED(page_pptonum(pp), ppages));
3694 3692
3695 3693 if (pszc != 0) {
3696 3694 group_page_unlock(pp);
3697 3695 }
3698 3696 page_unlock(pp);
3699 3697
3700 3698 pp = repl_pplist;
3701 3699 ASSERT(pp != NULL);
3702 3700 ASSERT(PAGE_EXCL(pp));
3703 3701 ASSERT(pp->p_szc == szc);
3704 3702 page_sub(&repl_pplist, pp);
3705 3703
3706 3704 ASSERT(IS_P2ALIGNED(page_pptonum(pp), ppages));
3707 3705
3708 3706 /* relink replacement page */
3709 3707 page_list_concat(&tmp_pplist, &pp);
3710 3708 while (--ppages != 0) {
3711 3709 VM_STAT_ADD(segvnvmstats.fill_vp_pages[22]);
3712 3710 pp++;
3713 3711 ASSERT(PAGE_EXCL(pp));
3714 3712 ASSERT(pp->p_szc == szc);
3715 3713 page_list_concat(&tmp_pplist, &pp);
3716 3714 }
3717 3715 }
3718 3716 if (tmp_pplist != NULL) {
3719 3717 VM_STAT_ADD(segvnvmstats.fill_vp_pages[23]);
3720 3718 page_list_concat(&tmp_pplist, &pplist);
3721 3719 pplist = tmp_pplist;
3722 3720 }
3723 3721 /*
3724 3722 * at this point all pages are either on done_pplist or
3725 3723 * pplist. They can't be all on done_pplist otherwise
3726 3724 * we'd've been done.
3727 3725 */
3728 3726 ASSERT(pplist != NULL);
3729 3727 if (nios != 0) {
3730 3728 VM_STAT_ADD(segvnvmstats.fill_vp_pages[24]);
3731 3729 pp = pplist;
3732 3730 do {
3733 3731 VM_STAT_ADD(segvnvmstats.fill_vp_pages[25]);
3734 3732 ASSERT(pp->p_szc == szc);
3735 3733 ASSERT(PAGE_EXCL(pp));
3736 3734 ASSERT(pp->p_vnode != vp);
3737 3735 pp->p_szc = 0;
3738 3736 } while ((pp = pp->p_next) != pplist);
3739 3737
3740 3738 pp = done_pplist;
3741 3739 do {
3742 3740 VM_STAT_ADD(segvnvmstats.fill_vp_pages[26]);
3743 3741 ASSERT(pp->p_szc == szc);
3744 3742 ASSERT(PAGE_EXCL(pp));
3745 3743 ASSERT(pp->p_vnode == vp);
3746 3744 pp->p_szc = 0;
3747 3745 } while ((pp = pp->p_next) != done_pplist);
3748 3746
3749 3747 while (pplist != NULL) {
3750 3748 VM_STAT_ADD(segvnvmstats.fill_vp_pages[27]);
3751 3749 pp = pplist;
3752 3750 page_sub(&pplist, pp);
3753 3751 page_free(pp, 0);
3754 3752 }
3755 3753
3756 3754 while (done_pplist != NULL) {
3757 3755 VM_STAT_ADD(segvnvmstats.fill_vp_pages[28]);
3758 3756 pp = done_pplist;
3759 3757 page_sub(&done_pplist, pp);
3760 3758 page_unlock(pp);
3761 3759 }
3762 3760 *ppplist = NULL;
3763 3761 return (0);
3764 3762 }
3765 3763 ASSERT(pplist == *ppplist);
3766 3764 if (io_err) {
3767 3765 VM_STAT_ADD(segvnvmstats.fill_vp_pages[29]);
3768 3766 /*
3769 3767 * don't downsize on io error.
3770 3768 * see if vop_getpage succeeds.
3771 3769 * pplist may still be used in this case
3772 3770 * for relocations.
3773 3771 */
3774 3772 return (0);
3775 3773 }
3776 3774 VM_STAT_ADD(segvnvmstats.fill_vp_pages[30]);
3777 3775 page_free_replacement_page(pplist);
3778 3776 page_create_putback(pages);
3779 3777 *ppplist = NULL;
3780 3778 return (0);
3781 3779 }
3782 3780
3783 3781 int segvn_anypgsz = 0;
3784 3782
3785 3783 #define SEGVN_RESTORE_SOFTLOCK_VP(type, pages) \
3786 3784 if ((type) == F_SOFTLOCK) { \
3787 3785 atomic_add_long((ulong_t *)&(svd)->softlockcnt, \
3788 3786 -(pages)); \
3789 3787 }
3790 3788
3791 3789 #define SEGVN_UPDATE_MODBITS(ppa, pages, rw, prot, vpprot) \
3792 3790 if (IS_VMODSORT((ppa)[0]->p_vnode)) { \
3793 3791 if ((rw) == S_WRITE) { \
3794 3792 for (i = 0; i < (pages); i++) { \
3795 3793 ASSERT((ppa)[i]->p_vnode == \
3796 3794 (ppa)[0]->p_vnode); \
3797 3795 hat_setmod((ppa)[i]); \
3798 3796 } \
3799 3797 } else if ((rw) != S_OTHER && \
3800 3798 ((prot) & (vpprot) & PROT_WRITE)) { \
3801 3799 for (i = 0; i < (pages); i++) { \
3802 3800 ASSERT((ppa)[i]->p_vnode == \
3803 3801 (ppa)[0]->p_vnode); \
3804 3802 if (!hat_ismod((ppa)[i])) { \
3805 3803 prot &= ~PROT_WRITE; \
3806 3804 break; \
3807 3805 } \
3808 3806 } \
3809 3807 } \
3810 3808 }
3811 3809
3812 3810 #ifdef VM_STATS
3813 3811
3814 3812 #define SEGVN_VMSTAT_FLTVNPAGES(idx) \
3815 3813 VM_STAT_ADD(segvnvmstats.fltvnpages[(idx)]);
3816 3814
3817 3815 #else /* VM_STATS */
3818 3816
3819 3817 #define SEGVN_VMSTAT_FLTVNPAGES(idx)
3820 3818
3821 3819 #endif
3822 3820
3823 3821 static faultcode_t
3824 3822 segvn_fault_vnodepages(struct hat *hat, struct seg *seg, caddr_t lpgaddr,
3825 3823 caddr_t lpgeaddr, enum fault_type type, enum seg_rw rw, caddr_t addr,
3826 3824 caddr_t eaddr, int brkcow)
3827 3825 {
3828 3826 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
3829 3827 struct anon_map *amp = svd->amp;
3830 3828 uchar_t segtype = svd->type;
3831 3829 uint_t szc = seg->s_szc;
3832 3830 size_t pgsz = page_get_pagesize(szc);
3833 3831 size_t maxpgsz = pgsz;
3834 3832 pgcnt_t pages = btop(pgsz);
3835 3833 pgcnt_t maxpages = pages;
3836 3834 size_t ppasize = (pages + 1) * sizeof (page_t *);
3837 3835 caddr_t a = lpgaddr;
3838 3836 caddr_t maxlpgeaddr = lpgeaddr;
3839 3837 u_offset_t off = svd->offset + (uintptr_t)(a - seg->s_base);
3840 3838 ulong_t aindx = svd->anon_index + seg_page(seg, a);
3841 3839 struct vpage *vpage = (svd->vpage != NULL) ?
3842 3840 &svd->vpage[seg_page(seg, a)] : NULL;
3843 3841 vnode_t *vp = svd->vp;
3844 3842 page_t **ppa;
3845 3843 uint_t pszc;
3846 3844 size_t ppgsz;
3847 3845 pgcnt_t ppages;
3848 3846 faultcode_t err = 0;
3849 3847 int ierr;
3850 3848 int vop_size_err = 0;
3851 3849 uint_t protchk, prot, vpprot;
3852 3850 ulong_t i;
3853 3851 int hat_flag = (type == F_SOFTLOCK) ? HAT_LOAD_LOCK : HAT_LOAD;
3854 3852 anon_sync_obj_t an_cookie;
3855 3853 enum seg_rw arw;
3856 3854 int alloc_failed = 0;
3857 3855 int adjszc_chk;
3858 3856 struct vattr va;
3859 3857 page_t *pplist;
3860 3858 pfn_t pfn;
3861 3859 int physcontig;
3862 3860 int upgrdfail;
3863 3861 int segvn_anypgsz_vnode = 0; /* for now map vnode with 2 page sizes */
3864 3862 int tron = (svd->tr_state == SEGVN_TR_ON);
3865 3863
3866 3864 ASSERT(szc != 0);
3867 3865 ASSERT(vp != NULL);
3868 3866 ASSERT(brkcow == 0 || amp != NULL);
3869 3867 ASSERT(tron == 0 || amp != NULL);
3870 3868 ASSERT(enable_mbit_wa == 0); /* no mbit simulations with large pages */
3871 3869 ASSERT(!(svd->flags & MAP_NORESERVE));
3872 3870 ASSERT(type != F_SOFTUNLOCK);
3873 3871 ASSERT(IS_P2ALIGNED(a, maxpgsz));
3874 3872 ASSERT(amp == NULL || IS_P2ALIGNED(aindx, maxpages));
3875 3873 ASSERT(SEGVN_LOCK_HELD(seg->s_as, &svd->lock));
3876 3874 ASSERT(seg->s_szc < NBBY * sizeof (int));
3877 3875 ASSERT(type != F_SOFTLOCK || lpgeaddr - a == maxpgsz);
3878 3876 ASSERT(svd->tr_state != SEGVN_TR_INIT);
3879 3877
3880 3878 VM_STAT_COND_ADD(type == F_SOFTLOCK, segvnvmstats.fltvnpages[0]);
3881 3879 VM_STAT_COND_ADD(type != F_SOFTLOCK, segvnvmstats.fltvnpages[1]);
3882 3880
3883 3881 if (svd->flags & MAP_TEXT) {
3884 3882 hat_flag |= HAT_LOAD_TEXT;
3885 3883 }
3886 3884
3887 3885 if (svd->pageprot) {
3888 3886 switch (rw) {
3889 3887 case S_READ:
3890 3888 protchk = PROT_READ;
3891 3889 break;
3892 3890 case S_WRITE:
3893 3891 protchk = PROT_WRITE;
3894 3892 break;
3895 3893 case S_EXEC:
3896 3894 protchk = PROT_EXEC;
3897 3895 break;
3898 3896 case S_OTHER:
3899 3897 default:
3900 3898 protchk = PROT_READ | PROT_WRITE | PROT_EXEC;
3901 3899 break;
3902 3900 }
3903 3901 } else {
3904 3902 prot = svd->prot;
3905 3903 /* caller has already done segment level protection check. */
3906 3904 }
3907 3905
3908 3906 if (rw == S_WRITE && segtype == MAP_PRIVATE) {
3909 3907 SEGVN_VMSTAT_FLTVNPAGES(2);
3910 3908 arw = S_READ;
3911 3909 } else {
3912 3910 arw = rw;
3913 3911 }
3914 3912
3915 3913 ppa = kmem_alloc(ppasize, KM_SLEEP);
3916 3914
3917 3915 VM_STAT_COND_ADD(amp != NULL, segvnvmstats.fltvnpages[3]);
3918 3916
3919 3917 for (;;) {
3920 3918 adjszc_chk = 0;
3921 3919 for (; a < lpgeaddr; a += pgsz, off += pgsz, aindx += pages) {
3922 3920 if (adjszc_chk) {
3923 3921 while (szc < seg->s_szc) {
3924 3922 uintptr_t e;
3925 3923 uint_t tszc;
3926 3924 tszc = segvn_anypgsz_vnode ? szc + 1 :
3927 3925 seg->s_szc;
3928 3926 ppgsz = page_get_pagesize(tszc);
3929 3927 if (!IS_P2ALIGNED(a, ppgsz) ||
3930 3928 ((alloc_failed >> tszc) & 0x1)) {
3931 3929 break;
3932 3930 }
3933 3931 SEGVN_VMSTAT_FLTVNPAGES(4);
3934 3932 szc = tszc;
3935 3933 pgsz = ppgsz;
3936 3934 pages = btop(pgsz);
3937 3935 e = P2ROUNDUP((uintptr_t)eaddr, pgsz);
3938 3936 lpgeaddr = (caddr_t)e;
3939 3937 }
3940 3938 }
3941 3939
3942 3940 again:
3943 3941 if (IS_P2ALIGNED(a, maxpgsz) && amp != NULL) {
3944 3942 ASSERT(IS_P2ALIGNED(aindx, maxpages));
3945 3943 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
3946 3944 anon_array_enter(amp, aindx, &an_cookie);
3947 3945 if (anon_get_ptr(amp->ahp, aindx) != NULL) {
3948 3946 SEGVN_VMSTAT_FLTVNPAGES(5);
3949 3947 ASSERT(anon_pages(amp->ahp, aindx,
3950 3948 maxpages) == maxpages);
3951 3949 anon_array_exit(&an_cookie);
3952 3950 ANON_LOCK_EXIT(&->a_rwlock);
3953 3951 err = segvn_fault_anonpages(hat, seg,
3954 3952 a, a + maxpgsz, type, rw,
3955 3953 MAX(a, addr),
3956 3954 MIN(a + maxpgsz, eaddr), brkcow);
3957 3955 if (err != 0) {
3958 3956 SEGVN_VMSTAT_FLTVNPAGES(6);
3959 3957 goto out;
3960 3958 }
3961 3959 if (szc < seg->s_szc) {
3962 3960 szc = seg->s_szc;
3963 3961 pgsz = maxpgsz;
3964 3962 pages = maxpages;
3965 3963 lpgeaddr = maxlpgeaddr;
3966 3964 }
3967 3965 goto next;
3968 3966 } else {
3969 3967 ASSERT(anon_pages(amp->ahp, aindx,
3970 3968 maxpages) == 0);
3971 3969 SEGVN_VMSTAT_FLTVNPAGES(7);
3972 3970 anon_array_exit(&an_cookie);
3973 3971 ANON_LOCK_EXIT(&->a_rwlock);
3974 3972 }
3975 3973 }
3976 3974 ASSERT(!brkcow || IS_P2ALIGNED(a, maxpgsz));
3977 3975 ASSERT(!tron || IS_P2ALIGNED(a, maxpgsz));
3978 3976
3979 3977 if (svd->pageprot != 0 && IS_P2ALIGNED(a, maxpgsz)) {
3980 3978 ASSERT(vpage != NULL);
3981 3979 prot = VPP_PROT(vpage);
3982 3980 ASSERT(sameprot(seg, a, maxpgsz));
3983 3981 if ((prot & protchk) == 0) {
3984 3982 SEGVN_VMSTAT_FLTVNPAGES(8);
3985 3983 err = FC_PROT;
3986 3984 goto out;
3987 3985 }
3988 3986 }
3989 3987 if (type == F_SOFTLOCK) {
3990 3988 atomic_add_long((ulong_t *)&svd->softlockcnt,
3991 3989 pages);
3992 3990 }
3993 3991
3994 3992 pplist = NULL;
3995 3993 physcontig = 0;
3996 3994 ppa[0] = NULL;
3997 3995 if (!brkcow && !tron && szc &&
3998 3996 !page_exists_physcontig(vp, off, szc,
3999 3997 segtype == MAP_PRIVATE ? ppa : NULL)) {
4000 3998 SEGVN_VMSTAT_FLTVNPAGES(9);
4001 3999 if (page_alloc_pages(vp, seg, a, &pplist, NULL,
4002 4000 szc, 0, 0) && type != F_SOFTLOCK) {
4003 4001 SEGVN_VMSTAT_FLTVNPAGES(10);
4004 4002 pszc = 0;
4005 4003 ierr = -1;
4006 4004 alloc_failed |= (1 << szc);
4007 4005 break;
4008 4006 }
4009 4007 if (pplist != NULL &&
4010 4008 vp->v_mpssdata == SEGVN_PAGEIO) {
4011 4009 int downsize;
4012 4010 SEGVN_VMSTAT_FLTVNPAGES(11);
4013 4011 physcontig = segvn_fill_vp_pages(svd,
4014 4012 vp, off, szc, ppa, &pplist,
4015 4013 &pszc, &downsize);
4016 4014 ASSERT(!physcontig || pplist == NULL);
4017 4015 if (!physcontig && downsize &&
4018 4016 type != F_SOFTLOCK) {
4019 4017 ASSERT(pplist == NULL);
4020 4018 SEGVN_VMSTAT_FLTVNPAGES(12);
4021 4019 ierr = -1;
4022 4020 break;
4023 4021 }
4024 4022 ASSERT(!physcontig ||
4025 4023 segtype == MAP_PRIVATE ||
4026 4024 ppa[0] == NULL);
4027 4025 if (physcontig && ppa[0] == NULL) {
4028 4026 physcontig = 0;
4029 4027 }
4030 4028 }
4031 4029 } else if (!brkcow && !tron && szc && ppa[0] != NULL) {
4032 4030 SEGVN_VMSTAT_FLTVNPAGES(13);
4033 4031 ASSERT(segtype == MAP_PRIVATE);
4034 4032 physcontig = 1;
4035 4033 }
4036 4034
4037 4035 if (!physcontig) {
4038 4036 SEGVN_VMSTAT_FLTVNPAGES(14);
4039 4037 ppa[0] = NULL;
4040 4038 ierr = VOP_GETPAGE(vp, (offset_t)off, pgsz,
4041 4039 &vpprot, ppa, pgsz, seg, a, arw,
4042 4040 svd->cred, NULL);
4043 4041 #ifdef DEBUG
4044 4042 if (ierr == 0) {
4045 4043 for (i = 0; i < pages; i++) {
4046 4044 ASSERT(PAGE_LOCKED(ppa[i]));
4047 4045 ASSERT(!PP_ISFREE(ppa[i]));
4048 4046 ASSERT(ppa[i]->p_vnode == vp);
4049 4047 ASSERT(ppa[i]->p_offset ==
4050 4048 off + (i << PAGESHIFT));
4051 4049 }
4052 4050 }
4053 4051 #endif /* DEBUG */
4054 4052 if (segtype == MAP_PRIVATE) {
4055 4053 SEGVN_VMSTAT_FLTVNPAGES(15);
4056 4054 vpprot &= ~PROT_WRITE;
4057 4055 }
4058 4056 } else {
4059 4057 ASSERT(segtype == MAP_PRIVATE);
4060 4058 SEGVN_VMSTAT_FLTVNPAGES(16);
4061 4059 vpprot = PROT_ALL & ~PROT_WRITE;
4062 4060 ierr = 0;
4063 4061 }
4064 4062
4065 4063 if (ierr != 0) {
4066 4064 SEGVN_VMSTAT_FLTVNPAGES(17);
4067 4065 if (pplist != NULL) {
4068 4066 SEGVN_VMSTAT_FLTVNPAGES(18);
4069 4067 page_free_replacement_page(pplist);
4070 4068 page_create_putback(pages);
4071 4069 }
4072 4070 SEGVN_RESTORE_SOFTLOCK_VP(type, pages);
4073 4071 if (a + pgsz <= eaddr) {
4074 4072 SEGVN_VMSTAT_FLTVNPAGES(19);
4075 4073 err = FC_MAKE_ERR(ierr);
4076 4074 goto out;
4077 4075 }
4078 4076 va.va_mask = AT_SIZE;
4079 4077 if (VOP_GETATTR(vp, &va, 0, svd->cred, NULL)) {
4080 4078 SEGVN_VMSTAT_FLTVNPAGES(20);
4081 4079 err = FC_MAKE_ERR(EIO);
4082 4080 goto out;
4083 4081 }
4084 4082 if (btopr(va.va_size) >= btopr(off + pgsz)) {
4085 4083 SEGVN_VMSTAT_FLTVNPAGES(21);
4086 4084 err = FC_MAKE_ERR(ierr);
4087 4085 goto out;
4088 4086 }
4089 4087 if (btopr(va.va_size) <
4090 4088 btopr(off + (eaddr - a))) {
4091 4089 SEGVN_VMSTAT_FLTVNPAGES(22);
4092 4090 err = FC_MAKE_ERR(ierr);
4093 4091 goto out;
4094 4092 }
4095 4093 if (brkcow || tron || type == F_SOFTLOCK) {
4096 4094 /* can't reduce map area */
4097 4095 SEGVN_VMSTAT_FLTVNPAGES(23);
4098 4096 vop_size_err = 1;
4099 4097 goto out;
4100 4098 }
4101 4099 SEGVN_VMSTAT_FLTVNPAGES(24);
4102 4100 ASSERT(szc != 0);
4103 4101 pszc = 0;
4104 4102 ierr = -1;
4105 4103 break;
4106 4104 }
4107 4105
4108 4106 if (amp != NULL) {
4109 4107 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
4110 4108 anon_array_enter(amp, aindx, &an_cookie);
4111 4109 }
4112 4110 if (amp != NULL &&
4113 4111 anon_get_ptr(amp->ahp, aindx) != NULL) {
4114 4112 ulong_t taindx = P2ALIGN(aindx, maxpages);
4115 4113
4116 4114 SEGVN_VMSTAT_FLTVNPAGES(25);
4117 4115 ASSERT(anon_pages(amp->ahp, taindx,
4118 4116 maxpages) == maxpages);
4119 4117 for (i = 0; i < pages; i++) {
4120 4118 page_unlock(ppa[i]);
4121 4119 }
4122 4120 anon_array_exit(&an_cookie);
4123 4121 ANON_LOCK_EXIT(&->a_rwlock);
4124 4122 if (pplist != NULL) {
4125 4123 page_free_replacement_page(pplist);
4126 4124 page_create_putback(pages);
4127 4125 }
4128 4126 SEGVN_RESTORE_SOFTLOCK_VP(type, pages);
4129 4127 if (szc < seg->s_szc) {
4130 4128 SEGVN_VMSTAT_FLTVNPAGES(26);
4131 4129 /*
4132 4130 * For private segments SOFTLOCK
4133 4131 * either always breaks cow (any rw
4134 4132 * type except S_READ_NOCOW) or
4135 4133 * address space is locked as writer
4136 4134 * (S_READ_NOCOW case) and anon slots
4137 4135 * can't show up on second check.
4138 4136 * Therefore if we are here for
4139 4137 * SOFTLOCK case it must be a cow
4140 4138 * break but cow break never reduces
4141 4139 * szc. text replication (tron) in
4142 4140 * this case works as cow break.
4143 4141 * Thus the assert below.
4144 4142 */
4145 4143 ASSERT(!brkcow && !tron &&
4146 4144 type != F_SOFTLOCK);
4147 4145 pszc = seg->s_szc;
4148 4146 ierr = -2;
4149 4147 break;
4150 4148 }
4151 4149 ASSERT(IS_P2ALIGNED(a, maxpgsz));
4152 4150 goto again;
4153 4151 }
4154 4152 #ifdef DEBUG
4155 4153 if (amp != NULL) {
4156 4154 ulong_t taindx = P2ALIGN(aindx, maxpages);
4157 4155 ASSERT(!anon_pages(amp->ahp, taindx, maxpages));
4158 4156 }
4159 4157 #endif /* DEBUG */
4160 4158
4161 4159 if (brkcow || tron) {
4162 4160 ASSERT(amp != NULL);
4163 4161 ASSERT(pplist == NULL);
4164 4162 ASSERT(szc == seg->s_szc);
4165 4163 ASSERT(IS_P2ALIGNED(a, maxpgsz));
4166 4164 ASSERT(IS_P2ALIGNED(aindx, maxpages));
4167 4165 SEGVN_VMSTAT_FLTVNPAGES(27);
4168 4166 ierr = anon_map_privatepages(amp, aindx, szc,
4169 4167 seg, a, prot, ppa, vpage, segvn_anypgsz,
4170 4168 tron ? PG_LOCAL : 0, svd->cred);
4171 4169 if (ierr != 0) {
4172 4170 SEGVN_VMSTAT_FLTVNPAGES(28);
4173 4171 anon_array_exit(&an_cookie);
4174 4172 ANON_LOCK_EXIT(&->a_rwlock);
4175 4173 SEGVN_RESTORE_SOFTLOCK_VP(type, pages);
4176 4174 err = FC_MAKE_ERR(ierr);
4177 4175 goto out;
4178 4176 }
4179 4177
4180 4178 ASSERT(!IS_VMODSORT(ppa[0]->p_vnode));
4181 4179 /*
4182 4180 * p_szc can't be changed for locked
4183 4181 * swapfs pages.
4184 4182 */
4185 4183 ASSERT(svd->rcookie ==
4186 4184 HAT_INVALID_REGION_COOKIE);
4187 4185 hat_memload_array(hat, a, pgsz, ppa, prot,
4188 4186 hat_flag);
4189 4187
4190 4188 if (!(hat_flag & HAT_LOAD_LOCK)) {
4191 4189 SEGVN_VMSTAT_FLTVNPAGES(29);
4192 4190 for (i = 0; i < pages; i++) {
4193 4191 page_unlock(ppa[i]);
4194 4192 }
4195 4193 }
4196 4194 anon_array_exit(&an_cookie);
4197 4195 ANON_LOCK_EXIT(&->a_rwlock);
4198 4196 goto next;
4199 4197 }
4200 4198
4201 4199 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE ||
4202 4200 (!svd->pageprot && svd->prot == (prot & vpprot)));
4203 4201
4204 4202 pfn = page_pptonum(ppa[0]);
4205 4203 /*
4206 4204 * hat_page_demote() needs an SE_EXCL lock on one of
4207 4205 * constituent page_t's and it decreases root's p_szc
4208 4206 * last. This means if root's p_szc is equal szc and
4209 4207 * all its constituent pages are locked
4210 4208 * hat_page_demote() that could have changed p_szc to
4211 4209 * szc is already done and no new have page_demote()
4212 4210 * can start for this large page.
4213 4211 */
4214 4212
4215 4213 /*
4216 4214 * we need to make sure same mapping size is used for
4217 4215 * the same address range if there's a possibility the
4218 4216 * adddress is already mapped because hat layer panics
4219 4217 * when translation is loaded for the range already
4220 4218 * mapped with a different page size. We achieve it
4221 4219 * by always using largest page size possible subject
4222 4220 * to the constraints of page size, segment page size
4223 4221 * and page alignment. Since mappings are invalidated
4224 4222 * when those constraints change and make it
4225 4223 * impossible to use previously used mapping size no
4226 4224 * mapping size conflicts should happen.
4227 4225 */
4228 4226
4229 4227 chkszc:
4230 4228 if ((pszc = ppa[0]->p_szc) == szc &&
4231 4229 IS_P2ALIGNED(pfn, pages)) {
4232 4230
4233 4231 SEGVN_VMSTAT_FLTVNPAGES(30);
4234 4232 #ifdef DEBUG
4235 4233 for (i = 0; i < pages; i++) {
4236 4234 ASSERT(PAGE_LOCKED(ppa[i]));
4237 4235 ASSERT(!PP_ISFREE(ppa[i]));
4238 4236 ASSERT(page_pptonum(ppa[i]) ==
4239 4237 pfn + i);
4240 4238 ASSERT(ppa[i]->p_szc == szc);
4241 4239 ASSERT(ppa[i]->p_vnode == vp);
4242 4240 ASSERT(ppa[i]->p_offset ==
4243 4241 off + (i << PAGESHIFT));
4244 4242 }
4245 4243 #endif /* DEBUG */
4246 4244 /*
4247 4245 * All pages are of szc we need and they are
4248 4246 * all locked so they can't change szc. load
4249 4247 * translations.
4250 4248 *
4251 4249 * if page got promoted since last check
4252 4250 * we don't need pplist.
4253 4251 */
4254 4252 if (pplist != NULL) {
4255 4253 page_free_replacement_page(pplist);
4256 4254 page_create_putback(pages);
4257 4255 }
4258 4256 if (PP_ISMIGRATE(ppa[0])) {
4259 4257 page_migrate(seg, a, ppa, pages);
4260 4258 }
4261 4259 SEGVN_UPDATE_MODBITS(ppa, pages, rw,
4262 4260 prot, vpprot);
4263 4261 hat_memload_array_region(hat, a, pgsz,
4264 4262 ppa, prot & vpprot, hat_flag,
4265 4263 svd->rcookie);
4266 4264
4267 4265 if (!(hat_flag & HAT_LOAD_LOCK)) {
4268 4266 for (i = 0; i < pages; i++) {
4269 4267 page_unlock(ppa[i]);
4270 4268 }
4271 4269 }
4272 4270 if (amp != NULL) {
4273 4271 anon_array_exit(&an_cookie);
4274 4272 ANON_LOCK_EXIT(&->a_rwlock);
4275 4273 }
4276 4274 goto next;
4277 4275 }
4278 4276
4279 4277 /*
4280 4278 * See if upsize is possible.
4281 4279 */
4282 4280 if (pszc > szc && szc < seg->s_szc &&
4283 4281 (segvn_anypgsz_vnode || pszc >= seg->s_szc)) {
4284 4282 pgcnt_t aphase;
4285 4283 uint_t pszc1 = MIN(pszc, seg->s_szc);
4286 4284 ppgsz = page_get_pagesize(pszc1);
4287 4285 ppages = btop(ppgsz);
4288 4286 aphase = btop(P2PHASE((uintptr_t)a, ppgsz));
4289 4287
4290 4288 ASSERT(type != F_SOFTLOCK);
4291 4289
4292 4290 SEGVN_VMSTAT_FLTVNPAGES(31);
4293 4291 if (aphase != P2PHASE(pfn, ppages)) {
4294 4292 segvn_faultvnmpss_align_err4++;
4295 4293 } else {
4296 4294 SEGVN_VMSTAT_FLTVNPAGES(32);
4297 4295 if (pplist != NULL) {
4298 4296 page_t *pl = pplist;
4299 4297 page_free_replacement_page(pl);
4300 4298 page_create_putback(pages);
4301 4299 }
4302 4300 for (i = 0; i < pages; i++) {
4303 4301 page_unlock(ppa[i]);
4304 4302 }
4305 4303 if (amp != NULL) {
4306 4304 anon_array_exit(&an_cookie);
4307 4305 ANON_LOCK_EXIT(&->a_rwlock);
4308 4306 }
4309 4307 pszc = pszc1;
4310 4308 ierr = -2;
4311 4309 break;
4312 4310 }
4313 4311 }
4314 4312
4315 4313 /*
4316 4314 * check if we should use smallest mapping size.
4317 4315 */
4318 4316 upgrdfail = 0;
4319 4317 if (szc == 0 ||
4320 4318 (pszc >= szc &&
4321 4319 !IS_P2ALIGNED(pfn, pages)) ||
4322 4320 (pszc < szc &&
4323 4321 !segvn_full_szcpages(ppa, szc, &upgrdfail,
4324 4322 &pszc))) {
4325 4323
4326 4324 if (upgrdfail && type != F_SOFTLOCK) {
4327 4325 /*
4328 4326 * segvn_full_szcpages failed to lock
4329 4327 * all pages EXCL. Size down.
4330 4328 */
4331 4329 ASSERT(pszc < szc);
4332 4330
4333 4331 SEGVN_VMSTAT_FLTVNPAGES(33);
4334 4332
4335 4333 if (pplist != NULL) {
4336 4334 page_t *pl = pplist;
4337 4335 page_free_replacement_page(pl);
4338 4336 page_create_putback(pages);
4339 4337 }
4340 4338
4341 4339 for (i = 0; i < pages; i++) {
4342 4340 page_unlock(ppa[i]);
4343 4341 }
4344 4342 if (amp != NULL) {
4345 4343 anon_array_exit(&an_cookie);
4346 4344 ANON_LOCK_EXIT(&->a_rwlock);
4347 4345 }
4348 4346 ierr = -1;
4349 4347 break;
4350 4348 }
4351 4349 if (szc != 0 && !upgrdfail) {
4352 4350 segvn_faultvnmpss_align_err5++;
4353 4351 }
4354 4352 SEGVN_VMSTAT_FLTVNPAGES(34);
4355 4353 if (pplist != NULL) {
4356 4354 page_free_replacement_page(pplist);
4357 4355 page_create_putback(pages);
4358 4356 }
4359 4357 SEGVN_UPDATE_MODBITS(ppa, pages, rw,
4360 4358 prot, vpprot);
4361 4359 if (upgrdfail && segvn_anypgsz_vnode) {
4362 4360 /* SOFTLOCK case */
4363 4361 hat_memload_array_region(hat, a, pgsz,
4364 4362 ppa, prot & vpprot, hat_flag,
4365 4363 svd->rcookie);
4366 4364 } else {
4367 4365 for (i = 0; i < pages; i++) {
4368 4366 hat_memload_region(hat,
4369 4367 a + (i << PAGESHIFT),
4370 4368 ppa[i], prot & vpprot,
4371 4369 hat_flag, svd->rcookie);
4372 4370 }
4373 4371 }
4374 4372 if (!(hat_flag & HAT_LOAD_LOCK)) {
4375 4373 for (i = 0; i < pages; i++) {
4376 4374 page_unlock(ppa[i]);
4377 4375 }
4378 4376 }
4379 4377 if (amp != NULL) {
4380 4378 anon_array_exit(&an_cookie);
4381 4379 ANON_LOCK_EXIT(&->a_rwlock);
4382 4380 }
4383 4381 goto next;
4384 4382 }
4385 4383
4386 4384 if (pszc == szc) {
4387 4385 /*
4388 4386 * segvn_full_szcpages() upgraded pages szc.
4389 4387 */
4390 4388 ASSERT(pszc == ppa[0]->p_szc);
4391 4389 ASSERT(IS_P2ALIGNED(pfn, pages));
4392 4390 goto chkszc;
4393 4391 }
4394 4392
4395 4393 if (pszc > szc) {
4396 4394 kmutex_t *szcmtx;
4397 4395 SEGVN_VMSTAT_FLTVNPAGES(35);
4398 4396 /*
4399 4397 * p_szc of ppa[0] can change since we haven't
4400 4398 * locked all constituent pages. Call
4401 4399 * page_lock_szc() to prevent szc changes.
4402 4400 * This should be a rare case that happens when
4403 4401 * multiple segments use a different page size
4404 4402 * to map the same file offsets.
4405 4403 */
4406 4404 szcmtx = page_szc_lock(ppa[0]);
4407 4405 pszc = ppa[0]->p_szc;
4408 4406 ASSERT(szcmtx != NULL || pszc == 0);
4409 4407 ASSERT(ppa[0]->p_szc <= pszc);
4410 4408 if (pszc <= szc) {
4411 4409 SEGVN_VMSTAT_FLTVNPAGES(36);
4412 4410 if (szcmtx != NULL) {
4413 4411 mutex_exit(szcmtx);
4414 4412 }
4415 4413 goto chkszc;
4416 4414 }
4417 4415 if (pplist != NULL) {
4418 4416 /*
4419 4417 * page got promoted since last check.
4420 4418 * we don't need preaalocated large
4421 4419 * page.
4422 4420 */
4423 4421 SEGVN_VMSTAT_FLTVNPAGES(37);
4424 4422 page_free_replacement_page(pplist);
4425 4423 page_create_putback(pages);
4426 4424 }
4427 4425 SEGVN_UPDATE_MODBITS(ppa, pages, rw,
4428 4426 prot, vpprot);
4429 4427 hat_memload_array_region(hat, a, pgsz, ppa,
4430 4428 prot & vpprot, hat_flag, svd->rcookie);
4431 4429 mutex_exit(szcmtx);
4432 4430 if (!(hat_flag & HAT_LOAD_LOCK)) {
4433 4431 for (i = 0; i < pages; i++) {
4434 4432 page_unlock(ppa[i]);
4435 4433 }
4436 4434 }
4437 4435 if (amp != NULL) {
4438 4436 anon_array_exit(&an_cookie);
4439 4437 ANON_LOCK_EXIT(&->a_rwlock);
4440 4438 }
4441 4439 goto next;
4442 4440 }
4443 4441
4444 4442 /*
4445 4443 * if page got demoted since last check
4446 4444 * we could have not allocated larger page.
4447 4445 * allocate now.
4448 4446 */
4449 4447 if (pplist == NULL &&
4450 4448 page_alloc_pages(vp, seg, a, &pplist, NULL,
4451 4449 szc, 0, 0) && type != F_SOFTLOCK) {
4452 4450 SEGVN_VMSTAT_FLTVNPAGES(38);
4453 4451 for (i = 0; i < pages; i++) {
4454 4452 page_unlock(ppa[i]);
4455 4453 }
4456 4454 if (amp != NULL) {
4457 4455 anon_array_exit(&an_cookie);
4458 4456 ANON_LOCK_EXIT(&->a_rwlock);
4459 4457 }
4460 4458 ierr = -1;
4461 4459 alloc_failed |= (1 << szc);
4462 4460 break;
4463 4461 }
4464 4462
4465 4463 SEGVN_VMSTAT_FLTVNPAGES(39);
4466 4464
4467 4465 if (pplist != NULL) {
4468 4466 segvn_relocate_pages(ppa, pplist);
4469 4467 #ifdef DEBUG
4470 4468 } else {
4471 4469 ASSERT(type == F_SOFTLOCK);
4472 4470 SEGVN_VMSTAT_FLTVNPAGES(40);
4473 4471 #endif /* DEBUG */
4474 4472 }
4475 4473
4476 4474 SEGVN_UPDATE_MODBITS(ppa, pages, rw, prot, vpprot);
4477 4475
4478 4476 if (pplist == NULL && segvn_anypgsz_vnode == 0) {
4479 4477 ASSERT(type == F_SOFTLOCK);
4480 4478 for (i = 0; i < pages; i++) {
4481 4479 ASSERT(ppa[i]->p_szc < szc);
4482 4480 hat_memload_region(hat,
4483 4481 a + (i << PAGESHIFT),
4484 4482 ppa[i], prot & vpprot, hat_flag,
4485 4483 svd->rcookie);
4486 4484 }
4487 4485 } else {
4488 4486 ASSERT(pplist != NULL || type == F_SOFTLOCK);
4489 4487 hat_memload_array_region(hat, a, pgsz, ppa,
4490 4488 prot & vpprot, hat_flag, svd->rcookie);
4491 4489 }
4492 4490 if (!(hat_flag & HAT_LOAD_LOCK)) {
4493 4491 for (i = 0; i < pages; i++) {
4494 4492 ASSERT(PAGE_SHARED(ppa[i]));
4495 4493 page_unlock(ppa[i]);
4496 4494 }
4497 4495 }
4498 4496 if (amp != NULL) {
4499 4497 anon_array_exit(&an_cookie);
4500 4498 ANON_LOCK_EXIT(&->a_rwlock);
4501 4499 }
4502 4500
4503 4501 next:
4504 4502 if (vpage != NULL) {
4505 4503 vpage += pages;
4506 4504 }
4507 4505 adjszc_chk = 1;
4508 4506 }
4509 4507 if (a == lpgeaddr)
4510 4508 break;
4511 4509 ASSERT(a < lpgeaddr);
4512 4510
4513 4511 ASSERT(!brkcow && !tron && type != F_SOFTLOCK);
4514 4512
4515 4513 /*
4516 4514 * ierr == -1 means we failed to map with a large page.
4517 4515 * (either due to allocation/relocation failures or
4518 4516 * misalignment with other mappings to this file.
4519 4517 *
4520 4518 * ierr == -2 means some other thread allocated a large page
4521 4519 * after we gave up tp map with a large page. retry with
4522 4520 * larger mapping.
4523 4521 */
4524 4522 ASSERT(ierr == -1 || ierr == -2);
4525 4523 ASSERT(ierr == -2 || szc != 0);
4526 4524 ASSERT(ierr == -1 || szc < seg->s_szc);
4527 4525 if (ierr == -2) {
4528 4526 SEGVN_VMSTAT_FLTVNPAGES(41);
4529 4527 ASSERT(pszc > szc && pszc <= seg->s_szc);
4530 4528 szc = pszc;
4531 4529 } else if (segvn_anypgsz_vnode) {
4532 4530 SEGVN_VMSTAT_FLTVNPAGES(42);
4533 4531 szc--;
4534 4532 } else {
4535 4533 SEGVN_VMSTAT_FLTVNPAGES(43);
4536 4534 ASSERT(pszc < szc);
4537 4535 /*
4538 4536 * other process created pszc large page.
4539 4537 * but we still have to drop to 0 szc.
4540 4538 */
4541 4539 szc = 0;
4542 4540 }
4543 4541
4544 4542 pgsz = page_get_pagesize(szc);
4545 4543 pages = btop(pgsz);
4546 4544 if (ierr == -2) {
4547 4545 /*
4548 4546 * Size up case. Note lpgaddr may only be needed for
4549 4547 * softlock case so we don't adjust it here.
4550 4548 */
4551 4549 a = (caddr_t)P2ALIGN((uintptr_t)a, pgsz);
4552 4550 ASSERT(a >= lpgaddr);
4553 4551 lpgeaddr = (caddr_t)P2ROUNDUP((uintptr_t)eaddr, pgsz);
4554 4552 off = svd->offset + (uintptr_t)(a - seg->s_base);
4555 4553 aindx = svd->anon_index + seg_page(seg, a);
4556 4554 vpage = (svd->vpage != NULL) ?
4557 4555 &svd->vpage[seg_page(seg, a)] : NULL;
4558 4556 } else {
4559 4557 /*
4560 4558 * Size down case. Note lpgaddr may only be needed for
4561 4559 * softlock case so we don't adjust it here.
4562 4560 */
4563 4561 ASSERT(IS_P2ALIGNED(a, pgsz));
4564 4562 ASSERT(IS_P2ALIGNED(lpgeaddr, pgsz));
4565 4563 lpgeaddr = (caddr_t)P2ROUNDUP((uintptr_t)eaddr, pgsz);
4566 4564 ASSERT(a < lpgeaddr);
4567 4565 if (a < addr) {
4568 4566 SEGVN_VMSTAT_FLTVNPAGES(44);
4569 4567 /*
4570 4568 * The beginning of the large page region can
4571 4569 * be pulled to the right to make a smaller
4572 4570 * region. We haven't yet faulted a single
4573 4571 * page.
4574 4572 */
4575 4573 a = (caddr_t)P2ALIGN((uintptr_t)addr, pgsz);
4576 4574 ASSERT(a >= lpgaddr);
4577 4575 off = svd->offset +
4578 4576 (uintptr_t)(a - seg->s_base);
4579 4577 aindx = svd->anon_index + seg_page(seg, a);
4580 4578 vpage = (svd->vpage != NULL) ?
4581 4579 &svd->vpage[seg_page(seg, a)] : NULL;
4582 4580 }
4583 4581 }
4584 4582 }
4585 4583 out:
4586 4584 kmem_free(ppa, ppasize);
4587 4585 if (!err && !vop_size_err) {
4588 4586 SEGVN_VMSTAT_FLTVNPAGES(45);
4589 4587 return (0);
4590 4588 }
4591 4589 if (type == F_SOFTLOCK && a > lpgaddr) {
4592 4590 SEGVN_VMSTAT_FLTVNPAGES(46);
4593 4591 segvn_softunlock(seg, lpgaddr, a - lpgaddr, S_OTHER);
4594 4592 }
4595 4593 if (!vop_size_err) {
4596 4594 SEGVN_VMSTAT_FLTVNPAGES(47);
4597 4595 return (err);
4598 4596 }
4599 4597 ASSERT(brkcow || tron || type == F_SOFTLOCK);
4600 4598 /*
4601 4599 * Large page end is mapped beyond the end of file and it's a cow
4602 4600 * fault (can be a text replication induced cow) or softlock so we can't
4603 4601 * reduce the map area. For now just demote the segment. This should
4604 4602 * really only happen if the end of the file changed after the mapping
4605 4603 * was established since when large page segments are created we make
4606 4604 * sure they don't extend beyond the end of the file.
4607 4605 */
4608 4606 SEGVN_VMSTAT_FLTVNPAGES(48);
4609 4607
4610 4608 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
4611 4609 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_WRITER);
4612 4610 err = 0;
4613 4611 if (seg->s_szc != 0) {
4614 4612 segvn_fltvnpages_clrszc_cnt++;
4615 4613 ASSERT(svd->softlockcnt == 0);
4616 4614 err = segvn_clrszc(seg);
4617 4615 if (err != 0) {
4618 4616 segvn_fltvnpages_clrszc_err++;
4619 4617 }
4620 4618 }
4621 4619 ASSERT(err || seg->s_szc == 0);
4622 4620 SEGVN_LOCK_DOWNGRADE(seg->s_as, &svd->lock);
4623 4621 /* segvn_fault will do its job as if szc had been zero to begin with */
4624 4622 return (err == 0 ? IE_RETRY : FC_MAKE_ERR(err));
4625 4623 }
4626 4624
4627 4625 /*
4628 4626 * This routine will attempt to fault in one large page.
4629 4627 * it will use smaller pages if that fails.
4630 4628 * It should only be called for pure anonymous segments.
4631 4629 */
4632 4630 static faultcode_t
4633 4631 segvn_fault_anonpages(struct hat *hat, struct seg *seg, caddr_t lpgaddr,
4634 4632 caddr_t lpgeaddr, enum fault_type type, enum seg_rw rw, caddr_t addr,
4635 4633 caddr_t eaddr, int brkcow)
4636 4634 {
4637 4635 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
4638 4636 struct anon_map *amp = svd->amp;
4639 4637 uchar_t segtype = svd->type;
4640 4638 uint_t szc = seg->s_szc;
4641 4639 size_t pgsz = page_get_pagesize(szc);
4642 4640 size_t maxpgsz = pgsz;
4643 4641 pgcnt_t pages = btop(pgsz);
4644 4642 uint_t ppaszc = szc;
4645 4643 caddr_t a = lpgaddr;
4646 4644 ulong_t aindx = svd->anon_index + seg_page(seg, a);
4647 4645 struct vpage *vpage = (svd->vpage != NULL) ?
4648 4646 &svd->vpage[seg_page(seg, a)] : NULL;
4649 4647 page_t **ppa;
4650 4648 uint_t ppa_szc;
4651 4649 faultcode_t err;
4652 4650 int ierr;
4653 4651 uint_t protchk, prot, vpprot;
4654 4652 ulong_t i;
4655 4653 int hat_flag = (type == F_SOFTLOCK) ? HAT_LOAD_LOCK : HAT_LOAD;
4656 4654 anon_sync_obj_t cookie;
4657 4655 int adjszc_chk;
4658 4656 int pgflags = (svd->tr_state == SEGVN_TR_ON) ? PG_LOCAL : 0;
4659 4657
4660 4658 ASSERT(szc != 0);
4661 4659 ASSERT(amp != NULL);
4662 4660 ASSERT(enable_mbit_wa == 0); /* no mbit simulations with large pages */
4663 4661 ASSERT(!(svd->flags & MAP_NORESERVE));
4664 4662 ASSERT(type != F_SOFTUNLOCK);
4665 4663 ASSERT(IS_P2ALIGNED(a, maxpgsz));
4666 4664 ASSERT(!brkcow || svd->tr_state == SEGVN_TR_OFF);
4667 4665 ASSERT(svd->tr_state != SEGVN_TR_INIT);
4668 4666
4669 4667 ASSERT(SEGVN_LOCK_HELD(seg->s_as, &svd->lock));
4670 4668
4671 4669 VM_STAT_COND_ADD(type == F_SOFTLOCK, segvnvmstats.fltanpages[0]);
4672 4670 VM_STAT_COND_ADD(type != F_SOFTLOCK, segvnvmstats.fltanpages[1]);
4673 4671
4674 4672 if (svd->flags & MAP_TEXT) {
4675 4673 hat_flag |= HAT_LOAD_TEXT;
4676 4674 }
4677 4675
4678 4676 if (svd->pageprot) {
4679 4677 switch (rw) {
4680 4678 case S_READ:
4681 4679 protchk = PROT_READ;
4682 4680 break;
4683 4681 case S_WRITE:
4684 4682 protchk = PROT_WRITE;
4685 4683 break;
4686 4684 case S_EXEC:
4687 4685 protchk = PROT_EXEC;
4688 4686 break;
4689 4687 case S_OTHER:
4690 4688 default:
4691 4689 protchk = PROT_READ | PROT_WRITE | PROT_EXEC;
4692 4690 break;
4693 4691 }
4694 4692 VM_STAT_ADD(segvnvmstats.fltanpages[2]);
4695 4693 } else {
4696 4694 prot = svd->prot;
4697 4695 /* caller has already done segment level protection check. */
4698 4696 }
4699 4697
4700 4698 ppa = kmem_cache_alloc(segvn_szc_cache[ppaszc], KM_SLEEP);
4701 4699 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
4702 4700 for (;;) {
4703 4701 adjszc_chk = 0;
4704 4702 for (; a < lpgeaddr; a += pgsz, aindx += pages) {
4705 4703 if (svd->pageprot != 0 && IS_P2ALIGNED(a, maxpgsz)) {
4706 4704 VM_STAT_ADD(segvnvmstats.fltanpages[3]);
4707 4705 ASSERT(vpage != NULL);
4708 4706 prot = VPP_PROT(vpage);
4709 4707 ASSERT(sameprot(seg, a, maxpgsz));
4710 4708 if ((prot & protchk) == 0) {
4711 4709 err = FC_PROT;
4712 4710 goto error;
4713 4711 }
4714 4712 }
4715 4713 if (adjszc_chk && IS_P2ALIGNED(a, maxpgsz) &&
4716 4714 pgsz < maxpgsz) {
4717 4715 ASSERT(a > lpgaddr);
4718 4716 szc = seg->s_szc;
4719 4717 pgsz = maxpgsz;
4720 4718 pages = btop(pgsz);
4721 4719 ASSERT(IS_P2ALIGNED(aindx, pages));
4722 4720 lpgeaddr = (caddr_t)P2ROUNDUP((uintptr_t)eaddr,
4723 4721 pgsz);
4724 4722 }
4725 4723 if (type == F_SOFTLOCK) {
4726 4724 atomic_add_long((ulong_t *)&svd->softlockcnt,
4727 4725 pages);
4728 4726 }
4729 4727 anon_array_enter(amp, aindx, &cookie);
4730 4728 ppa_szc = (uint_t)-1;
4731 4729 ierr = anon_map_getpages(amp, aindx, szc, seg, a,
4732 4730 prot, &vpprot, ppa, &ppa_szc, vpage, rw, brkcow,
4733 4731 segvn_anypgsz, pgflags, svd->cred);
4734 4732 if (ierr != 0) {
4735 4733 anon_array_exit(&cookie);
4736 4734 VM_STAT_ADD(segvnvmstats.fltanpages[4]);
4737 4735 if (type == F_SOFTLOCK) {
4738 4736 atomic_add_long(
4739 4737 (ulong_t *)&svd->softlockcnt,
4740 4738 -pages);
4741 4739 }
4742 4740 if (ierr > 0) {
4743 4741 VM_STAT_ADD(segvnvmstats.fltanpages[6]);
4744 4742 err = FC_MAKE_ERR(ierr);
4745 4743 goto error;
4746 4744 }
4747 4745 break;
4748 4746 }
4749 4747
4750 4748 ASSERT(!IS_VMODSORT(ppa[0]->p_vnode));
4751 4749
4752 4750 ASSERT(segtype == MAP_SHARED ||
4753 4751 ppa[0]->p_szc <= szc);
4754 4752 ASSERT(segtype == MAP_PRIVATE ||
4755 4753 ppa[0]->p_szc >= szc);
4756 4754
4757 4755 /*
4758 4756 * Handle pages that have been marked for migration
4759 4757 */
4760 4758 if (lgrp_optimizations())
4761 4759 page_migrate(seg, a, ppa, pages);
4762 4760
4763 4761 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
4764 4762
4765 4763 if (segtype == MAP_SHARED) {
4766 4764 vpprot |= PROT_WRITE;
4767 4765 }
4768 4766
4769 4767 hat_memload_array(hat, a, pgsz, ppa,
4770 4768 prot & vpprot, hat_flag);
4771 4769
4772 4770 if (hat_flag & HAT_LOAD_LOCK) {
4773 4771 VM_STAT_ADD(segvnvmstats.fltanpages[7]);
4774 4772 } else {
4775 4773 VM_STAT_ADD(segvnvmstats.fltanpages[8]);
4776 4774 for (i = 0; i < pages; i++)
4777 4775 page_unlock(ppa[i]);
4778 4776 }
4779 4777 if (vpage != NULL)
4780 4778 vpage += pages;
4781 4779
4782 4780 anon_array_exit(&cookie);
4783 4781 adjszc_chk = 1;
4784 4782 }
4785 4783 if (a == lpgeaddr)
4786 4784 break;
4787 4785 ASSERT(a < lpgeaddr);
4788 4786 /*
4789 4787 * ierr == -1 means we failed to allocate a large page.
4790 4788 * so do a size down operation.
4791 4789 *
4792 4790 * ierr == -2 means some other process that privately shares
4793 4791 * pages with this process has allocated a larger page and we
4794 4792 * need to retry with larger pages. So do a size up
4795 4793 * operation. This relies on the fact that large pages are
4796 4794 * never partially shared i.e. if we share any constituent
4797 4795 * page of a large page with another process we must share the
4798 4796 * entire large page. Note this cannot happen for SOFTLOCK
4799 4797 * case, unless current address (a) is at the beginning of the
4800 4798 * next page size boundary because the other process couldn't
4801 4799 * have relocated locked pages.
4802 4800 */
4803 4801 ASSERT(ierr == -1 || ierr == -2);
4804 4802
4805 4803 if (segvn_anypgsz) {
4806 4804 ASSERT(ierr == -2 || szc != 0);
4807 4805 ASSERT(ierr == -1 || szc < seg->s_szc);
4808 4806 szc = (ierr == -1) ? szc - 1 : szc + 1;
4809 4807 } else {
4810 4808 /*
4811 4809 * For non COW faults and segvn_anypgsz == 0
4812 4810 * we need to be careful not to loop forever
4813 4811 * if existing page is found with szc other
4814 4812 * than 0 or seg->s_szc. This could be due
4815 4813 * to page relocations on behalf of DR or
4816 4814 * more likely large page creation. For this
4817 4815 * case simply re-size to existing page's szc
4818 4816 * if returned by anon_map_getpages().
4819 4817 */
4820 4818 if (ppa_szc == (uint_t)-1) {
4821 4819 szc = (ierr == -1) ? 0 : seg->s_szc;
4822 4820 } else {
4823 4821 ASSERT(ppa_szc <= seg->s_szc);
4824 4822 ASSERT(ierr == -2 || ppa_szc < szc);
4825 4823 ASSERT(ierr == -1 || ppa_szc > szc);
4826 4824 szc = ppa_szc;
4827 4825 }
4828 4826 }
4829 4827
4830 4828 pgsz = page_get_pagesize(szc);
4831 4829 pages = btop(pgsz);
4832 4830 ASSERT(type != F_SOFTLOCK || ierr == -1 ||
4833 4831 (IS_P2ALIGNED(a, pgsz) && IS_P2ALIGNED(lpgeaddr, pgsz)));
4834 4832 if (type == F_SOFTLOCK) {
4835 4833 /*
4836 4834 * For softlocks we cannot reduce the fault area
4837 4835 * (calculated based on the largest page size for this
4838 4836 * segment) for size down and a is already next
4839 4837 * page size aligned as assertted above for size
4840 4838 * ups. Therefore just continue in case of softlock.
4841 4839 */
4842 4840 VM_STAT_ADD(segvnvmstats.fltanpages[9]);
4843 4841 continue; /* keep lint happy */
4844 4842 } else if (ierr == -2) {
4845 4843
4846 4844 /*
4847 4845 * Size up case. Note lpgaddr may only be needed for
4848 4846 * softlock case so we don't adjust it here.
4849 4847 */
4850 4848 VM_STAT_ADD(segvnvmstats.fltanpages[10]);
4851 4849 a = (caddr_t)P2ALIGN((uintptr_t)a, pgsz);
4852 4850 ASSERT(a >= lpgaddr);
4853 4851 lpgeaddr = (caddr_t)P2ROUNDUP((uintptr_t)eaddr, pgsz);
4854 4852 aindx = svd->anon_index + seg_page(seg, a);
4855 4853 vpage = (svd->vpage != NULL) ?
4856 4854 &svd->vpage[seg_page(seg, a)] : NULL;
4857 4855 } else {
4858 4856 /*
4859 4857 * Size down case. Note lpgaddr may only be needed for
4860 4858 * softlock case so we don't adjust it here.
4861 4859 */
4862 4860 VM_STAT_ADD(segvnvmstats.fltanpages[11]);
4863 4861 ASSERT(IS_P2ALIGNED(a, pgsz));
4864 4862 ASSERT(IS_P2ALIGNED(lpgeaddr, pgsz));
4865 4863 lpgeaddr = (caddr_t)P2ROUNDUP((uintptr_t)eaddr, pgsz);
4866 4864 ASSERT(a < lpgeaddr);
4867 4865 if (a < addr) {
4868 4866 /*
4869 4867 * The beginning of the large page region can
4870 4868 * be pulled to the right to make a smaller
4871 4869 * region. We haven't yet faulted a single
4872 4870 * page.
4873 4871 */
4874 4872 VM_STAT_ADD(segvnvmstats.fltanpages[12]);
4875 4873 a = (caddr_t)P2ALIGN((uintptr_t)addr, pgsz);
4876 4874 ASSERT(a >= lpgaddr);
4877 4875 aindx = svd->anon_index + seg_page(seg, a);
4878 4876 vpage = (svd->vpage != NULL) ?
4879 4877 &svd->vpage[seg_page(seg, a)] : NULL;
4880 4878 }
4881 4879 }
4882 4880 }
4883 4881 VM_STAT_ADD(segvnvmstats.fltanpages[13]);
4884 4882 ANON_LOCK_EXIT(&->a_rwlock);
4885 4883 kmem_cache_free(segvn_szc_cache[ppaszc], ppa);
4886 4884 return (0);
4887 4885 error:
4888 4886 VM_STAT_ADD(segvnvmstats.fltanpages[14]);
4889 4887 ANON_LOCK_EXIT(&->a_rwlock);
4890 4888 kmem_cache_free(segvn_szc_cache[ppaszc], ppa);
4891 4889 if (type == F_SOFTLOCK && a > lpgaddr) {
4892 4890 VM_STAT_ADD(segvnvmstats.fltanpages[15]);
4893 4891 segvn_softunlock(seg, lpgaddr, a - lpgaddr, S_OTHER);
4894 4892 }
4895 4893 return (err);
4896 4894 }
4897 4895
4898 4896 int fltadvice = 1; /* set to free behind pages for sequential access */
4899 4897
4900 4898 /*
4901 4899 * This routine is called via a machine specific fault handling routine.
4902 4900 * It is also called by software routines wishing to lock or unlock
4903 4901 * a range of addresses.
4904 4902 *
4905 4903 * Here is the basic algorithm:
4906 4904 * If unlocking
4907 4905 * Call segvn_softunlock
4908 4906 * Return
4909 4907 * endif
4910 4908 * Checking and set up work
4911 4909 * If we will need some non-anonymous pages
4912 4910 * Call VOP_GETPAGE over the range of non-anonymous pages
4913 4911 * endif
4914 4912 * Loop over all addresses requested
4915 4913 * Call segvn_faultpage passing in page list
4916 4914 * to load up translations and handle anonymous pages
4917 4915 * endloop
4918 4916 * Load up translation to any additional pages in page list not
4919 4917 * already handled that fit into this segment
4920 4918 */
4921 4919 static faultcode_t
4922 4920 segvn_fault(struct hat *hat, struct seg *seg, caddr_t addr, size_t len,
4923 4921 enum fault_type type, enum seg_rw rw)
4924 4922 {
4925 4923 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
4926 4924 page_t **plp, **ppp, *pp;
4927 4925 u_offset_t off;
4928 4926 caddr_t a;
4929 4927 struct vpage *vpage;
4930 4928 uint_t vpprot, prot;
4931 4929 int err;
4932 4930 page_t *pl[PVN_GETPAGE_NUM + 1];
4933 4931 size_t plsz, pl_alloc_sz;
4934 4932 size_t page;
4935 4933 ulong_t anon_index;
4936 4934 struct anon_map *amp;
4937 4935 int dogetpage = 0;
4938 4936 caddr_t lpgaddr, lpgeaddr;
4939 4937 size_t pgsz;
4940 4938 anon_sync_obj_t cookie;
4941 4939 int brkcow = BREAK_COW_SHARE(rw, type, svd->type);
4942 4940
4943 4941 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
4944 4942 ASSERT(svd->amp == NULL || svd->rcookie == HAT_INVALID_REGION_COOKIE);
4945 4943
4946 4944 /*
4947 4945 * First handle the easy stuff
4948 4946 */
4949 4947 if (type == F_SOFTUNLOCK) {
4950 4948 if (rw == S_READ_NOCOW) {
4951 4949 rw = S_READ;
4952 4950 ASSERT(AS_WRITE_HELD(seg->s_as));
4953 4951 }
4954 4952 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_READER);
4955 4953 pgsz = (seg->s_szc == 0) ? PAGESIZE :
4956 4954 page_get_pagesize(seg->s_szc);
4957 4955 VM_STAT_COND_ADD(pgsz > PAGESIZE, segvnvmstats.fltanpages[16]);
4958 4956 CALC_LPG_REGION(pgsz, seg, addr, len, lpgaddr, lpgeaddr);
4959 4957 segvn_softunlock(seg, lpgaddr, lpgeaddr - lpgaddr, rw);
4960 4958 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
4961 4959 return (0);
4962 4960 }
4963 4961
4964 4962 ASSERT(svd->tr_state == SEGVN_TR_OFF ||
4965 4963 !HAT_IS_REGION_COOKIE_VALID(svd->rcookie));
4966 4964 if (brkcow == 0) {
4967 4965 if (svd->tr_state == SEGVN_TR_INIT) {
4968 4966 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_WRITER);
4969 4967 if (svd->tr_state == SEGVN_TR_INIT) {
4970 4968 ASSERT(svd->vp != NULL && svd->amp == NULL);
4971 4969 ASSERT(svd->flags & MAP_TEXT);
4972 4970 ASSERT(svd->type == MAP_PRIVATE);
4973 4971 segvn_textrepl(seg);
4974 4972 ASSERT(svd->tr_state != SEGVN_TR_INIT);
4975 4973 ASSERT(svd->tr_state != SEGVN_TR_ON ||
4976 4974 svd->amp != NULL);
4977 4975 }
4978 4976 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
4979 4977 }
4980 4978 } else if (svd->tr_state != SEGVN_TR_OFF) {
4981 4979 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_WRITER);
4982 4980
4983 4981 if (rw == S_WRITE && svd->tr_state != SEGVN_TR_OFF) {
4984 4982 ASSERT(!svd->pageprot && !(svd->prot & PROT_WRITE));
4985 4983 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
4986 4984 return (FC_PROT);
4987 4985 }
4988 4986
4989 4987 if (svd->tr_state == SEGVN_TR_ON) {
4990 4988 ASSERT(svd->vp != NULL && svd->amp != NULL);
4991 4989 segvn_textunrepl(seg, 0);
4992 4990 ASSERT(svd->amp == NULL &&
4993 4991 svd->tr_state == SEGVN_TR_OFF);
4994 4992 } else if (svd->tr_state != SEGVN_TR_OFF) {
4995 4993 svd->tr_state = SEGVN_TR_OFF;
4996 4994 }
4997 4995 ASSERT(svd->amp == NULL && svd->tr_state == SEGVN_TR_OFF);
4998 4996 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
4999 4997 }
5000 4998
5001 4999 top:
5002 5000 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_READER);
5003 5001
5004 5002 /*
5005 5003 * If we have the same protections for the entire segment,
5006 5004 * insure that the access being attempted is legitimate.
5007 5005 */
5008 5006
5009 5007 if (svd->pageprot == 0) {
5010 5008 uint_t protchk;
5011 5009
5012 5010 switch (rw) {
5013 5011 case S_READ:
5014 5012 case S_READ_NOCOW:
5015 5013 protchk = PROT_READ;
5016 5014 break;
5017 5015 case S_WRITE:
5018 5016 protchk = PROT_WRITE;
5019 5017 break;
5020 5018 case S_EXEC:
5021 5019 protchk = PROT_EXEC;
5022 5020 break;
5023 5021 case S_OTHER:
5024 5022 default:
5025 5023 protchk = PROT_READ | PROT_WRITE | PROT_EXEC;
5026 5024 break;
5027 5025 }
5028 5026
5029 5027 if ((svd->prot & protchk) == 0) {
5030 5028 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5031 5029 return (FC_PROT); /* illegal access type */
5032 5030 }
5033 5031 }
5034 5032
5035 5033 if (brkcow && HAT_IS_REGION_COOKIE_VALID(svd->rcookie)) {
5036 5034 /* this must be SOFTLOCK S_READ fault */
5037 5035 ASSERT(svd->amp == NULL);
5038 5036 ASSERT(svd->tr_state == SEGVN_TR_OFF);
5039 5037 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5040 5038 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_WRITER);
5041 5039 if (HAT_IS_REGION_COOKIE_VALID(svd->rcookie)) {
5042 5040 /*
5043 5041 * this must be the first ever non S_READ_NOCOW
5044 5042 * softlock for this segment.
5045 5043 */
5046 5044 ASSERT(svd->softlockcnt == 0);
5047 5045 hat_leave_region(seg->s_as->a_hat, svd->rcookie,
5048 5046 HAT_REGION_TEXT);
5049 5047 svd->rcookie = HAT_INVALID_REGION_COOKIE;
5050 5048 }
5051 5049 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5052 5050 goto top;
5053 5051 }
5054 5052
5055 5053 /*
5056 5054 * We can't allow the long term use of softlocks for vmpss segments,
5057 5055 * because in some file truncation cases we should be able to demote
5058 5056 * the segment, which requires that there are no softlocks. The
5059 5057 * only case where it's ok to allow a SOFTLOCK fault against a vmpss
5060 5058 * segment is S_READ_NOCOW, where the caller holds the address space
5061 5059 * locked as writer and calls softunlock before dropping the as lock.
5062 5060 * S_READ_NOCOW is used by /proc to read memory from another user.
5063 5061 *
5064 5062 * Another deadlock between SOFTLOCK and file truncation can happen
5065 5063 * because segvn_fault_vnodepages() calls the FS one pagesize at
5066 5064 * a time. A second VOP_GETPAGE() call by segvn_fault_vnodepages()
5067 5065 * can cause a deadlock because the first set of page_t's remain
5068 5066 * locked SE_SHARED. To avoid this, we demote segments on a first
5069 5067 * SOFTLOCK if they have a length greater than the segment's
5070 5068 * page size.
5071 5069 *
5072 5070 * So for now, we only avoid demoting a segment on a SOFTLOCK when
5073 5071 * the access type is S_READ_NOCOW and the fault length is less than
5074 5072 * or equal to the segment's page size. While this is quite restrictive,
5075 5073 * it should be the most common case of SOFTLOCK against a vmpss
5076 5074 * segment.
5077 5075 *
5078 5076 * For S_READ_NOCOW, it's safe not to do a copy on write because the
5079 5077 * caller makes sure no COW will be caused by another thread for a
5080 5078 * softlocked page.
5081 5079 */
5082 5080 if (type == F_SOFTLOCK && svd->vp != NULL && seg->s_szc != 0) {
5083 5081 int demote = 0;
5084 5082
5085 5083 if (rw != S_READ_NOCOW) {
5086 5084 demote = 1;
5087 5085 }
5088 5086 if (!demote && len > PAGESIZE) {
5089 5087 pgsz = page_get_pagesize(seg->s_szc);
5090 5088 CALC_LPG_REGION(pgsz, seg, addr, len, lpgaddr,
5091 5089 lpgeaddr);
5092 5090 if (lpgeaddr - lpgaddr > pgsz) {
5093 5091 demote = 1;
5094 5092 }
5095 5093 }
5096 5094
5097 5095 ASSERT(demote || AS_WRITE_HELD(seg->s_as));
5098 5096
5099 5097 if (demote) {
5100 5098 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5101 5099 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_WRITER);
5102 5100 if (seg->s_szc != 0) {
5103 5101 segvn_vmpss_clrszc_cnt++;
5104 5102 ASSERT(svd->softlockcnt == 0);
5105 5103 err = segvn_clrszc(seg);
5106 5104 if (err) {
5107 5105 segvn_vmpss_clrszc_err++;
5108 5106 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5109 5107 return (FC_MAKE_ERR(err));
5110 5108 }
5111 5109 }
5112 5110 ASSERT(seg->s_szc == 0);
5113 5111 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5114 5112 goto top;
5115 5113 }
5116 5114 }
5117 5115
5118 5116 /*
5119 5117 * Check to see if we need to allocate an anon_map structure.
5120 5118 */
5121 5119 if (svd->amp == NULL && (svd->vp == NULL || brkcow)) {
5122 5120 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
5123 5121 /*
5124 5122 * Drop the "read" lock on the segment and acquire
5125 5123 * the "write" version since we have to allocate the
5126 5124 * anon_map.
5127 5125 */
5128 5126 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5129 5127 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_WRITER);
5130 5128
5131 5129 if (svd->amp == NULL) {
5132 5130 svd->amp = anonmap_alloc(seg->s_size, 0, ANON_SLEEP);
5133 5131 svd->amp->a_szc = seg->s_szc;
5134 5132 }
5135 5133 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5136 5134
5137 5135 /*
5138 5136 * Start all over again since segment protections
5139 5137 * may have changed after we dropped the "read" lock.
5140 5138 */
5141 5139 goto top;
5142 5140 }
5143 5141
5144 5142 /*
5145 5143 * S_READ_NOCOW vs S_READ distinction was
5146 5144 * only needed for the code above. After
5147 5145 * that we treat it as S_READ.
5148 5146 */
5149 5147 if (rw == S_READ_NOCOW) {
5150 5148 ASSERT(type == F_SOFTLOCK);
5151 5149 ASSERT(AS_WRITE_HELD(seg->s_as));
5152 5150 rw = S_READ;
5153 5151 }
5154 5152
5155 5153 amp = svd->amp;
5156 5154
5157 5155 /*
5158 5156 * MADV_SEQUENTIAL work is ignored for large page segments.
5159 5157 */
5160 5158 if (seg->s_szc != 0) {
5161 5159 pgsz = page_get_pagesize(seg->s_szc);
5162 5160 ASSERT(SEGVN_LOCK_HELD(seg->s_as, &svd->lock));
5163 5161 CALC_LPG_REGION(pgsz, seg, addr, len, lpgaddr, lpgeaddr);
5164 5162 if (svd->vp == NULL) {
5165 5163 err = segvn_fault_anonpages(hat, seg, lpgaddr,
5166 5164 lpgeaddr, type, rw, addr, addr + len, brkcow);
5167 5165 } else {
5168 5166 err = segvn_fault_vnodepages(hat, seg, lpgaddr,
5169 5167 lpgeaddr, type, rw, addr, addr + len, brkcow);
5170 5168 if (err == IE_RETRY) {
5171 5169 ASSERT(seg->s_szc == 0);
5172 5170 ASSERT(SEGVN_READ_HELD(seg->s_as, &svd->lock));
5173 5171 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5174 5172 goto top;
5175 5173 }
5176 5174 }
5177 5175 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5178 5176 return (err);
5179 5177 }
5180 5178
5181 5179 page = seg_page(seg, addr);
5182 5180 if (amp != NULL) {
5183 5181 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
5184 5182 anon_index = svd->anon_index + page;
5185 5183
5186 5184 if (type == F_PROT && rw == S_READ &&
5187 5185 svd->tr_state == SEGVN_TR_OFF &&
5188 5186 svd->type == MAP_PRIVATE && svd->pageprot == 0) {
5189 5187 size_t index = anon_index;
5190 5188 struct anon *ap;
5191 5189
5192 5190 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
5193 5191 /*
5194 5192 * The fast path could apply to S_WRITE also, except
5195 5193 * that the protection fault could be caused by lazy
5196 5194 * tlb flush when ro->rw. In this case, the pte is
5197 5195 * RW already. But RO in the other cpu's tlb causes
5198 5196 * the fault. Since hat_chgprot won't do anything if
5199 5197 * pte doesn't change, we may end up faulting
5200 5198 * indefinitely until the RO tlb entry gets replaced.
5201 5199 */
5202 5200 for (a = addr; a < addr + len; a += PAGESIZE, index++) {
5203 5201 anon_array_enter(amp, index, &cookie);
5204 5202 ap = anon_get_ptr(amp->ahp, index);
5205 5203 anon_array_exit(&cookie);
5206 5204 if ((ap == NULL) || (ap->an_refcnt != 1)) {
5207 5205 ANON_LOCK_EXIT(&->a_rwlock);
5208 5206 goto slow;
5209 5207 }
5210 5208 }
5211 5209 hat_chgprot(seg->s_as->a_hat, addr, len, svd->prot);
5212 5210 ANON_LOCK_EXIT(&->a_rwlock);
5213 5211 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5214 5212 return (0);
5215 5213 }
5216 5214 }
5217 5215 slow:
5218 5216
5219 5217 if (svd->vpage == NULL)
5220 5218 vpage = NULL;
5221 5219 else
5222 5220 vpage = &svd->vpage[page];
5223 5221
5224 5222 off = svd->offset + (uintptr_t)(addr - seg->s_base);
5225 5223
5226 5224 /*
5227 5225 * If MADV_SEQUENTIAL has been set for the particular page we
5228 5226 * are faulting on, free behind all pages in the segment and put
5229 5227 * them on the free list.
5230 5228 */
5231 5229
5232 5230 if ((page != 0) && fltadvice && svd->tr_state != SEGVN_TR_ON) {
5233 5231 struct vpage *vpp;
5234 5232 ulong_t fanon_index;
5235 5233 size_t fpage;
5236 5234 u_offset_t pgoff, fpgoff;
5237 5235 struct vnode *fvp;
5238 5236 struct anon *fap = NULL;
5239 5237
5240 5238 if (svd->advice == MADV_SEQUENTIAL ||
5241 5239 (svd->pageadvice &&
5242 5240 VPP_ADVICE(vpage) == MADV_SEQUENTIAL)) {
5243 5241 pgoff = off - PAGESIZE;
5244 5242 fpage = page - 1;
5245 5243 if (vpage != NULL)
5246 5244 vpp = &svd->vpage[fpage];
5247 5245 if (amp != NULL)
5248 5246 fanon_index = svd->anon_index + fpage;
5249 5247
5250 5248 while (pgoff > svd->offset) {
5251 5249 if (svd->advice != MADV_SEQUENTIAL &&
5252 5250 (!svd->pageadvice || (vpage &&
5253 5251 VPP_ADVICE(vpp) != MADV_SEQUENTIAL)))
5254 5252 break;
5255 5253
5256 5254 /*
5257 5255 * If this is an anon page, we must find the
5258 5256 * correct <vp, offset> for it
5259 5257 */
5260 5258 fap = NULL;
5261 5259 if (amp != NULL) {
5262 5260 ANON_LOCK_ENTER(&->a_rwlock,
5263 5261 RW_READER);
5264 5262 anon_array_enter(amp, fanon_index,
5265 5263 &cookie);
5266 5264 fap = anon_get_ptr(amp->ahp,
5267 5265 fanon_index);
5268 5266 if (fap != NULL) {
5269 5267 swap_xlate(fap, &fvp, &fpgoff);
5270 5268 } else {
5271 5269 fpgoff = pgoff;
5272 5270 fvp = svd->vp;
5273 5271 }
5274 5272 anon_array_exit(&cookie);
5275 5273 ANON_LOCK_EXIT(&->a_rwlock);
5276 5274 } else {
5277 5275 fpgoff = pgoff;
5278 5276 fvp = svd->vp;
5279 5277 }
5280 5278 if (fvp == NULL)
5281 5279 break; /* XXX */
5282 5280 /*
5283 5281 * Skip pages that are free or have an
5284 5282 * "exclusive" lock.
5285 5283 */
5286 5284 pp = page_lookup_nowait(fvp, fpgoff, SE_SHARED);
5287 5285 if (pp == NULL)
5288 5286 break;
5289 5287 /*
5290 5288 * We don't need the page_struct_lock to test
5291 5289 * as this is only advisory; even if we
5292 5290 * acquire it someone might race in and lock
5293 5291 * the page after we unlock and before the
5294 5292 * PUTPAGE, then VOP_PUTPAGE will do nothing.
5295 5293 */
5296 5294 if (pp->p_lckcnt == 0 && pp->p_cowcnt == 0) {
5297 5295 /*
5298 5296 * Hold the vnode before releasing
5299 5297 * the page lock to prevent it from
5300 5298 * being freed and re-used by some
5301 5299 * other thread.
5302 5300 */
5303 5301 VN_HOLD(fvp);
5304 5302 page_unlock(pp);
5305 5303 /*
5306 5304 * We should build a page list
5307 5305 * to kluster putpages XXX
5308 5306 */
5309 5307 (void) VOP_PUTPAGE(fvp,
5310 5308 (offset_t)fpgoff, PAGESIZE,
5311 5309 (B_DONTNEED|B_FREE|B_ASYNC),
5312 5310 svd->cred, NULL);
5313 5311 VN_RELE(fvp);
5314 5312 } else {
5315 5313 /*
5316 5314 * XXX - Should the loop terminate if
5317 5315 * the page is `locked'?
5318 5316 */
5319 5317 page_unlock(pp);
5320 5318 }
5321 5319 --vpp;
5322 5320 --fanon_index;
5323 5321 pgoff -= PAGESIZE;
5324 5322 }
5325 5323 }
5326 5324 }
5327 5325
5328 5326 plp = pl;
5329 5327 *plp = NULL;
5330 5328 pl_alloc_sz = 0;
5331 5329
5332 5330 /*
5333 5331 * See if we need to call VOP_GETPAGE for
5334 5332 * *any* of the range being faulted on.
5335 5333 * We can skip all of this work if there
5336 5334 * was no original vnode.
5337 5335 */
5338 5336 if (svd->vp != NULL) {
5339 5337 u_offset_t vp_off;
5340 5338 size_t vp_len;
5341 5339 struct anon *ap;
5342 5340 vnode_t *vp;
5343 5341
5344 5342 vp_off = off;
5345 5343 vp_len = len;
5346 5344
5347 5345 if (amp == NULL)
5348 5346 dogetpage = 1;
5349 5347 else {
5350 5348 /*
5351 5349 * Only acquire reader lock to prevent amp->ahp
5352 5350 * from being changed. It's ok to miss pages,
5353 5351 * hence we don't do anon_array_enter
5354 5352 */
5355 5353 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
5356 5354 ap = anon_get_ptr(amp->ahp, anon_index);
5357 5355
5358 5356 if (len <= PAGESIZE)
5359 5357 /* inline non_anon() */
5360 5358 dogetpage = (ap == NULL);
5361 5359 else
5362 5360 dogetpage = non_anon(amp->ahp, anon_index,
5363 5361 &vp_off, &vp_len);
5364 5362 ANON_LOCK_EXIT(&->a_rwlock);
5365 5363 }
5366 5364
5367 5365 if (dogetpage) {
5368 5366 enum seg_rw arw;
5369 5367 struct as *as = seg->s_as;
5370 5368
5371 5369 if (len > ptob((sizeof (pl) / sizeof (pl[0])) - 1)) {
5372 5370 /*
5373 5371 * Page list won't fit in local array,
5374 5372 * allocate one of the needed size.
5375 5373 */
5376 5374 pl_alloc_sz =
5377 5375 (btop(len) + 1) * sizeof (page_t *);
5378 5376 plp = kmem_alloc(pl_alloc_sz, KM_SLEEP);
5379 5377 plp[0] = NULL;
5380 5378 plsz = len;
5381 5379 } else if (rw == S_WRITE && svd->type == MAP_PRIVATE ||
5382 5380 svd->tr_state == SEGVN_TR_ON || rw == S_OTHER ||
5383 5381 (((size_t)(addr + PAGESIZE) <
5384 5382 (size_t)(seg->s_base + seg->s_size)) &&
5385 5383 hat_probe(as->a_hat, addr + PAGESIZE))) {
5386 5384 /*
5387 5385 * Ask VOP_GETPAGE to return the exact number
5388 5386 * of pages if
5389 5387 * (a) this is a COW fault, or
5390 5388 * (b) this is a software fault, or
5391 5389 * (c) next page is already mapped.
5392 5390 */
5393 5391 plsz = len;
5394 5392 } else {
5395 5393 /*
5396 5394 * Ask VOP_GETPAGE to return adjacent pages
5397 5395 * within the segment.
5398 5396 */
5399 5397 plsz = MIN((size_t)PVN_GETPAGE_SZ, (size_t)
5400 5398 ((seg->s_base + seg->s_size) - addr));
5401 5399 ASSERT((addr + plsz) <=
5402 5400 (seg->s_base + seg->s_size));
5403 5401 }
5404 5402
5405 5403 /*
5406 5404 * Need to get some non-anonymous pages.
5407 5405 * We need to make only one call to GETPAGE to do
5408 5406 * this to prevent certain deadlocking conditions
5409 5407 * when we are doing locking. In this case
5410 5408 * non_anon() should have picked up the smallest
5411 5409 * range which includes all the non-anonymous
5412 5410 * pages in the requested range. We have to
5413 5411 * be careful regarding which rw flag to pass in
5414 5412 * because on a private mapping, the underlying
5415 5413 * object is never allowed to be written.
5416 5414 */
5417 5415 if (rw == S_WRITE && svd->type == MAP_PRIVATE) {
5418 5416 arw = S_READ;
5419 5417 } else {
5420 5418 arw = rw;
5421 5419 }
5422 5420 vp = svd->vp;
5423 5421 TRACE_3(TR_FAC_VM, TR_SEGVN_GETPAGE,
5424 5422 "segvn_getpage:seg %p addr %p vp %p",
5425 5423 seg, addr, vp);
5426 5424 err = VOP_GETPAGE(vp, (offset_t)vp_off, vp_len,
5427 5425 &vpprot, plp, plsz, seg, addr + (vp_off - off), arw,
5428 5426 svd->cred, NULL);
5429 5427 if (err) {
5430 5428 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5431 5429 segvn_pagelist_rele(plp);
5432 5430 if (pl_alloc_sz)
5433 5431 kmem_free(plp, pl_alloc_sz);
5434 5432 return (FC_MAKE_ERR(err));
5435 5433 }
5436 5434 if (svd->type == MAP_PRIVATE)
5437 5435 vpprot &= ~PROT_WRITE;
5438 5436 }
5439 5437 }
5440 5438
5441 5439 /*
5442 5440 * N.B. at this time the plp array has all the needed non-anon
5443 5441 * pages in addition to (possibly) having some adjacent pages.
5444 5442 */
5445 5443
5446 5444 /*
5447 5445 * Always acquire the anon_array_lock to prevent
5448 5446 * 2 threads from allocating separate anon slots for
5449 5447 * the same "addr".
5450 5448 *
5451 5449 * If this is a copy-on-write fault and we don't already
5452 5450 * have the anon_array_lock, acquire it to prevent the
5453 5451 * fault routine from handling multiple copy-on-write faults
5454 5452 * on the same "addr" in the same address space.
5455 5453 *
5456 5454 * Only one thread should deal with the fault since after
5457 5455 * it is handled, the other threads can acquire a translation
5458 5456 * to the newly created private page. This prevents two or
5459 5457 * more threads from creating different private pages for the
5460 5458 * same fault.
5461 5459 *
5462 5460 * We grab "serialization" lock here if this is a MAP_PRIVATE segment
5463 5461 * to prevent deadlock between this thread and another thread
5464 5462 * which has soft-locked this page and wants to acquire serial_lock.
5465 5463 * ( bug 4026339 )
5466 5464 *
5467 5465 * The fix for bug 4026339 becomes unnecessary when using the
5468 5466 * locking scheme with per amp rwlock and a global set of hash
5469 5467 * lock, anon_array_lock. If we steal a vnode page when low
5470 5468 * on memory and upgrad the page lock through page_rename,
5471 5469 * then the page is PAGE_HANDLED, nothing needs to be done
5472 5470 * for this page after returning from segvn_faultpage.
5473 5471 *
5474 5472 * But really, the page lock should be downgraded after
5475 5473 * the stolen page is page_rename'd.
5476 5474 */
5477 5475
5478 5476 if (amp != NULL)
5479 5477 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
5480 5478
5481 5479 /*
5482 5480 * Ok, now loop over the address range and handle faults
5483 5481 */
5484 5482 for (a = addr; a < addr + len; a += PAGESIZE, off += PAGESIZE) {
5485 5483 err = segvn_faultpage(hat, seg, a, off, vpage, plp, vpprot,
5486 5484 type, rw, brkcow);
5487 5485 if (err) {
5488 5486 if (amp != NULL)
5489 5487 ANON_LOCK_EXIT(&->a_rwlock);
5490 5488 if (type == F_SOFTLOCK && a > addr) {
5491 5489 segvn_softunlock(seg, addr, (a - addr),
5492 5490 S_OTHER);
5493 5491 }
5494 5492 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5495 5493 segvn_pagelist_rele(plp);
5496 5494 if (pl_alloc_sz)
5497 5495 kmem_free(plp, pl_alloc_sz);
5498 5496 return (err);
5499 5497 }
5500 5498 if (vpage) {
5501 5499 vpage++;
5502 5500 } else if (svd->vpage) {
5503 5501 page = seg_page(seg, addr);
5504 5502 vpage = &svd->vpage[++page];
5505 5503 }
5506 5504 }
5507 5505
5508 5506 /* Didn't get pages from the underlying fs so we're done */
5509 5507 if (!dogetpage)
5510 5508 goto done;
5511 5509
5512 5510 /*
5513 5511 * Now handle any other pages in the list returned.
5514 5512 * If the page can be used, load up the translations now.
5515 5513 * Note that the for loop will only be entered if "plp"
5516 5514 * is pointing to a non-NULL page pointer which means that
5517 5515 * VOP_GETPAGE() was called and vpprot has been initialized.
5518 5516 */
5519 5517 if (svd->pageprot == 0)
5520 5518 prot = svd->prot & vpprot;
5521 5519
5522 5520
5523 5521 /*
5524 5522 * Large Files: diff should be unsigned value because we started
5525 5523 * supporting > 2GB segment sizes from 2.5.1 and when a
5526 5524 * large file of size > 2GB gets mapped to address space
5527 5525 * the diff value can be > 2GB.
5528 5526 */
5529 5527
5530 5528 for (ppp = plp; (pp = *ppp) != NULL; ppp++) {
5531 5529 size_t diff;
5532 5530 struct anon *ap;
5533 5531 int anon_index;
5534 5532 anon_sync_obj_t cookie;
5535 5533 int hat_flag = HAT_LOAD_ADV;
5536 5534
5537 5535 if (svd->flags & MAP_TEXT) {
5538 5536 hat_flag |= HAT_LOAD_TEXT;
5539 5537 }
5540 5538
5541 5539 if (pp == PAGE_HANDLED)
5542 5540 continue;
5543 5541
5544 5542 if (svd->tr_state != SEGVN_TR_ON &&
5545 5543 pp->p_offset >= svd->offset &&
5546 5544 pp->p_offset < svd->offset + seg->s_size) {
5547 5545
5548 5546 diff = pp->p_offset - svd->offset;
5549 5547
5550 5548 /*
5551 5549 * Large Files: Following is the assertion
5552 5550 * validating the above cast.
5553 5551 */
5554 5552 ASSERT(svd->vp == pp->p_vnode);
5555 5553
5556 5554 page = btop(diff);
5557 5555 if (svd->pageprot)
5558 5556 prot = VPP_PROT(&svd->vpage[page]) & vpprot;
5559 5557
5560 5558 /*
5561 5559 * Prevent other threads in the address space from
5562 5560 * creating private pages (i.e., allocating anon slots)
5563 5561 * while we are in the process of loading translations
5564 5562 * to additional pages returned by the underlying
5565 5563 * object.
5566 5564 */
5567 5565 if (amp != NULL) {
5568 5566 anon_index = svd->anon_index + page;
5569 5567 anon_array_enter(amp, anon_index, &cookie);
5570 5568 ap = anon_get_ptr(amp->ahp, anon_index);
5571 5569 }
5572 5570 if ((amp == NULL) || (ap == NULL)) {
5573 5571 if (IS_VMODSORT(pp->p_vnode) ||
5574 5572 enable_mbit_wa) {
5575 5573 if (rw == S_WRITE)
5576 5574 hat_setmod(pp);
5577 5575 else if (rw != S_OTHER &&
5578 5576 !hat_ismod(pp))
5579 5577 prot &= ~PROT_WRITE;
5580 5578 }
5581 5579 /*
5582 5580 * Skip mapping read ahead pages marked
5583 5581 * for migration, so they will get migrated
5584 5582 * properly on fault
5585 5583 */
5586 5584 ASSERT(amp == NULL ||
5587 5585 svd->rcookie == HAT_INVALID_REGION_COOKIE);
5588 5586 if ((prot & PROT_READ) && !PP_ISMIGRATE(pp)) {
5589 5587 hat_memload_region(hat,
5590 5588 seg->s_base + diff,
5591 5589 pp, prot, hat_flag,
5592 5590 svd->rcookie);
5593 5591 }
5594 5592 }
5595 5593 if (amp != NULL)
5596 5594 anon_array_exit(&cookie);
5597 5595 }
5598 5596 page_unlock(pp);
5599 5597 }
5600 5598 done:
5601 5599 if (amp != NULL)
5602 5600 ANON_LOCK_EXIT(&->a_rwlock);
5603 5601 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5604 5602 if (pl_alloc_sz)
5605 5603 kmem_free(plp, pl_alloc_sz);
5606 5604 return (0);
5607 5605 }
5608 5606
5609 5607 /*
5610 5608 * This routine is used to start I/O on pages asynchronously. XXX it will
5611 5609 * only create PAGESIZE pages. At fault time they will be relocated into
5612 5610 * larger pages.
5613 5611 */
5614 5612 static faultcode_t
5615 5613 segvn_faulta(struct seg *seg, caddr_t addr)
5616 5614 {
5617 5615 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
5618 5616 int err;
5619 5617 struct anon_map *amp;
5620 5618 vnode_t *vp;
5621 5619
5622 5620 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
5623 5621
5624 5622 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_READER);
5625 5623 if ((amp = svd->amp) != NULL) {
5626 5624 struct anon *ap;
5627 5625
5628 5626 /*
5629 5627 * Reader lock to prevent amp->ahp from being changed.
5630 5628 * This is advisory, it's ok to miss a page, so
5631 5629 * we don't do anon_array_enter lock.
5632 5630 */
5633 5631 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
5634 5632 if ((ap = anon_get_ptr(amp->ahp,
5635 5633 svd->anon_index + seg_page(seg, addr))) != NULL) {
5636 5634
5637 5635 err = anon_getpage(&ap, NULL, NULL,
5638 5636 0, seg, addr, S_READ, svd->cred);
5639 5637
5640 5638 ANON_LOCK_EXIT(&->a_rwlock);
5641 5639 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5642 5640 if (err)
5643 5641 return (FC_MAKE_ERR(err));
5644 5642 return (0);
5645 5643 }
5646 5644 ANON_LOCK_EXIT(&->a_rwlock);
5647 5645 }
5648 5646
5649 5647 if (svd->vp == NULL) {
5650 5648 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5651 5649 return (0); /* zfod page - do nothing now */
5652 5650 }
5653 5651
5654 5652 vp = svd->vp;
5655 5653 TRACE_3(TR_FAC_VM, TR_SEGVN_GETPAGE,
5656 5654 "segvn_getpage:seg %p addr %p vp %p", seg, addr, vp);
5657 5655 err = VOP_GETPAGE(vp,
5658 5656 (offset_t)(svd->offset + (uintptr_t)(addr - seg->s_base)),
5659 5657 PAGESIZE, NULL, NULL, 0, seg, addr,
5660 5658 S_OTHER, svd->cred, NULL);
5661 5659
5662 5660 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5663 5661 if (err)
5664 5662 return (FC_MAKE_ERR(err));
5665 5663 return (0);
5666 5664 }
5667 5665
5668 5666 static int
5669 5667 segvn_setprot(struct seg *seg, caddr_t addr, size_t len, uint_t prot)
5670 5668 {
5671 5669 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
5672 5670 struct vpage *cvp, *svp, *evp;
5673 5671 struct vnode *vp;
5674 5672 size_t pgsz;
5675 5673 pgcnt_t pgcnt;
5676 5674 anon_sync_obj_t cookie;
5677 5675 int unload_done = 0;
5678 5676
5679 5677 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
5680 5678
5681 5679 if ((svd->maxprot & prot) != prot)
5682 5680 return (EACCES); /* violated maxprot */
5683 5681
5684 5682 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_WRITER);
5685 5683
5686 5684 /* return if prot is the same */
5687 5685 if (!svd->pageprot && svd->prot == prot) {
5688 5686 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5689 5687 return (0);
5690 5688 }
5691 5689
5692 5690 /*
5693 5691 * Since we change protections we first have to flush the cache.
5694 5692 * This makes sure all the pagelock calls have to recheck
5695 5693 * protections.
5696 5694 */
5697 5695 if (svd->softlockcnt > 0) {
5698 5696 ASSERT(svd->tr_state == SEGVN_TR_OFF);
5699 5697
5700 5698 /*
5701 5699 * If this is shared segment non 0 softlockcnt
5702 5700 * means locked pages are still in use.
5703 5701 */
5704 5702 if (svd->type == MAP_SHARED) {
5705 5703 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5706 5704 return (EAGAIN);
5707 5705 }
5708 5706
5709 5707 /*
5710 5708 * Since we do have the segvn writers lock nobody can fill
5711 5709 * the cache with entries belonging to this seg during
5712 5710 * the purge. The flush either succeeds or we still have
5713 5711 * pending I/Os.
5714 5712 */
5715 5713 segvn_purge(seg);
5716 5714 if (svd->softlockcnt > 0) {
5717 5715 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5718 5716 return (EAGAIN);
5719 5717 }
5720 5718 }
5721 5719
5722 5720 if (HAT_IS_REGION_COOKIE_VALID(svd->rcookie)) {
5723 5721 ASSERT(svd->amp == NULL);
5724 5722 ASSERT(svd->tr_state == SEGVN_TR_OFF);
5725 5723 hat_leave_region(seg->s_as->a_hat, svd->rcookie,
5726 5724 HAT_REGION_TEXT);
5727 5725 svd->rcookie = HAT_INVALID_REGION_COOKIE;
5728 5726 unload_done = 1;
5729 5727 } else if (svd->tr_state == SEGVN_TR_INIT) {
5730 5728 svd->tr_state = SEGVN_TR_OFF;
5731 5729 } else if (svd->tr_state == SEGVN_TR_ON) {
5732 5730 ASSERT(svd->amp != NULL);
5733 5731 segvn_textunrepl(seg, 0);
5734 5732 ASSERT(svd->amp == NULL && svd->tr_state == SEGVN_TR_OFF);
5735 5733 unload_done = 1;
5736 5734 }
5737 5735
5738 5736 if ((prot & PROT_WRITE) && svd->type == MAP_SHARED &&
5739 5737 svd->vp != NULL && (svd->vp->v_flag & VVMEXEC)) {
5740 5738 ASSERT(vn_is_mapped(svd->vp, V_WRITE));
5741 5739 segvn_inval_trcache(svd->vp);
5742 5740 }
5743 5741 if (seg->s_szc != 0) {
5744 5742 int err;
5745 5743 pgsz = page_get_pagesize(seg->s_szc);
5746 5744 pgcnt = pgsz >> PAGESHIFT;
5747 5745 ASSERT(IS_P2ALIGNED(pgcnt, pgcnt));
5748 5746 if (!IS_P2ALIGNED(addr, pgsz) || !IS_P2ALIGNED(len, pgsz)) {
5749 5747 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5750 5748 ASSERT(seg->s_base != addr || seg->s_size != len);
5751 5749 /*
5752 5750 * If we are holding the as lock as a reader then
5753 5751 * we need to return IE_RETRY and let the as
5754 5752 * layer drop and re-acquire the lock as a writer.
5755 5753 */
5756 5754 if (AS_READ_HELD(seg->s_as))
5757 5755 return (IE_RETRY);
5758 5756 VM_STAT_ADD(segvnvmstats.demoterange[1]);
5759 5757 if (svd->type == MAP_PRIVATE || svd->vp != NULL) {
5760 5758 err = segvn_demote_range(seg, addr, len,
5761 5759 SDR_END, 0);
5762 5760 } else {
5763 5761 uint_t szcvec = map_pgszcvec(seg->s_base,
5764 5762 pgsz, (uintptr_t)seg->s_base,
5765 5763 (svd->flags & MAP_TEXT), MAPPGSZC_SHM, 0);
5766 5764 err = segvn_demote_range(seg, addr, len,
5767 5765 SDR_END, szcvec);
5768 5766 }
5769 5767 if (err == 0)
5770 5768 return (IE_RETRY);
5771 5769 if (err == ENOMEM)
5772 5770 return (IE_NOMEM);
5773 5771 return (err);
5774 5772 }
5775 5773 }
5776 5774
5777 5775
5778 5776 /*
5779 5777 * If it's a private mapping and we're making it writable then we
5780 5778 * may have to reserve the additional swap space now. If we are
5781 5779 * making writable only a part of the segment then we use its vpage
5782 5780 * array to keep a record of the pages for which we have reserved
5783 5781 * swap. In this case we set the pageswap field in the segment's
5784 5782 * segvn structure to record this.
5785 5783 *
5786 5784 * If it's a private mapping to a file (i.e., vp != NULL) and we're
5787 5785 * removing write permission on the entire segment and we haven't
5788 5786 * modified any pages, we can release the swap space.
5789 5787 */
5790 5788 if (svd->type == MAP_PRIVATE) {
5791 5789 if (prot & PROT_WRITE) {
5792 5790 if (!(svd->flags & MAP_NORESERVE) &&
5793 5791 !(svd->swresv && svd->pageswap == 0)) {
5794 5792 size_t sz = 0;
5795 5793
5796 5794 /*
5797 5795 * Start by determining how much swap
5798 5796 * space is required.
5799 5797 */
5800 5798 if (addr == seg->s_base &&
5801 5799 len == seg->s_size &&
5802 5800 svd->pageswap == 0) {
5803 5801 /* The whole segment */
5804 5802 sz = seg->s_size;
5805 5803 } else {
5806 5804 /*
5807 5805 * Make sure that the vpage array
5808 5806 * exists, and make a note of the
5809 5807 * range of elements corresponding
5810 5808 * to len.
5811 5809 */
5812 5810 segvn_vpage(seg);
5813 5811 if (svd->vpage == NULL) {
5814 5812 SEGVN_LOCK_EXIT(seg->s_as,
5815 5813 &svd->lock);
5816 5814 return (ENOMEM);
5817 5815 }
5818 5816 svp = &svd->vpage[seg_page(seg, addr)];
5819 5817 evp = &svd->vpage[seg_page(seg,
5820 5818 addr + len)];
5821 5819
5822 5820 if (svd->pageswap == 0) {
5823 5821 /*
5824 5822 * This is the first time we've
5825 5823 * asked for a part of this
5826 5824 * segment, so we need to
5827 5825 * reserve everything we've
5828 5826 * been asked for.
5829 5827 */
5830 5828 sz = len;
5831 5829 } else {
5832 5830 /*
5833 5831 * We have to count the number
5834 5832 * of pages required.
5835 5833 */
5836 5834 for (cvp = svp; cvp < evp;
5837 5835 cvp++) {
5838 5836 if (!VPP_ISSWAPRES(cvp))
5839 5837 sz++;
5840 5838 }
5841 5839 sz <<= PAGESHIFT;
5842 5840 }
5843 5841 }
5844 5842
5845 5843 /* Try to reserve the necessary swap. */
5846 5844 if (anon_resv_zone(sz,
5847 5845 seg->s_as->a_proc->p_zone) == 0) {
5848 5846 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5849 5847 return (IE_NOMEM);
5850 5848 }
5851 5849
5852 5850 /*
5853 5851 * Make a note of how much swap space
5854 5852 * we've reserved.
5855 5853 */
5856 5854 if (svd->pageswap == 0 && sz == seg->s_size) {
5857 5855 svd->swresv = sz;
5858 5856 } else {
5859 5857 ASSERT(svd->vpage != NULL);
5860 5858 svd->swresv += sz;
5861 5859 svd->pageswap = 1;
5862 5860 for (cvp = svp; cvp < evp; cvp++) {
5863 5861 if (!VPP_ISSWAPRES(cvp))
5864 5862 VPP_SETSWAPRES(cvp);
5865 5863 }
5866 5864 }
5867 5865 }
5868 5866 } else {
5869 5867 /*
5870 5868 * Swap space is released only if this segment
5871 5869 * does not map anonymous memory, since read faults
5872 5870 * on such segments still need an anon slot to read
5873 5871 * in the data.
5874 5872 */
5875 5873 if (svd->swresv != 0 && svd->vp != NULL &&
5876 5874 svd->amp == NULL && addr == seg->s_base &&
5877 5875 len == seg->s_size && svd->pageprot == 0) {
5878 5876 ASSERT(svd->pageswap == 0);
5879 5877 anon_unresv_zone(svd->swresv,
5880 5878 seg->s_as->a_proc->p_zone);
5881 5879 svd->swresv = 0;
5882 5880 TRACE_3(TR_FAC_VM, TR_ANON_PROC,
5883 5881 "anon proc:%p %lu %u", seg, 0, 0);
5884 5882 }
5885 5883 }
5886 5884 }
5887 5885
5888 5886 if (addr == seg->s_base && len == seg->s_size && svd->vpage == NULL) {
5889 5887 if (svd->prot == prot) {
5890 5888 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5891 5889 return (0); /* all done */
5892 5890 }
5893 5891 svd->prot = (uchar_t)prot;
5894 5892 } else if (svd->type == MAP_PRIVATE) {
5895 5893 struct anon *ap = NULL;
5896 5894 page_t *pp;
5897 5895 u_offset_t offset, off;
5898 5896 struct anon_map *amp;
5899 5897 ulong_t anon_idx = 0;
5900 5898
5901 5899 /*
5902 5900 * A vpage structure exists or else the change does not
5903 5901 * involve the entire segment. Establish a vpage structure
5904 5902 * if none is there. Then, for each page in the range,
5905 5903 * adjust its individual permissions. Note that write-
5906 5904 * enabling a MAP_PRIVATE page can affect the claims for
5907 5905 * locked down memory. Overcommitting memory terminates
5908 5906 * the operation.
5909 5907 */
5910 5908 segvn_vpage(seg);
5911 5909 if (svd->vpage == NULL) {
5912 5910 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
5913 5911 return (ENOMEM);
5914 5912 }
5915 5913 svd->pageprot = 1;
5916 5914 if ((amp = svd->amp) != NULL) {
5917 5915 anon_idx = svd->anon_index + seg_page(seg, addr);
5918 5916 ASSERT(seg->s_szc == 0 ||
5919 5917 IS_P2ALIGNED(anon_idx, pgcnt));
5920 5918 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
5921 5919 }
5922 5920
5923 5921 offset = svd->offset + (uintptr_t)(addr - seg->s_base);
5924 5922 evp = &svd->vpage[seg_page(seg, addr + len)];
5925 5923
5926 5924 /*
5927 5925 * See Statement at the beginning of segvn_lockop regarding
5928 5926 * the way cowcnts and lckcnts are handled.
5929 5927 */
5930 5928 for (svp = &svd->vpage[seg_page(seg, addr)]; svp < evp; svp++) {
5931 5929
5932 5930 if (seg->s_szc != 0) {
5933 5931 if (amp != NULL) {
5934 5932 anon_array_enter(amp, anon_idx,
5935 5933 &cookie);
5936 5934 }
5937 5935 if (IS_P2ALIGNED(anon_idx, pgcnt) &&
5938 5936 !segvn_claim_pages(seg, svp, offset,
5939 5937 anon_idx, prot)) {
5940 5938 if (amp != NULL) {
5941 5939 anon_array_exit(&cookie);
5942 5940 }
5943 5941 break;
5944 5942 }
5945 5943 if (amp != NULL) {
5946 5944 anon_array_exit(&cookie);
5947 5945 }
5948 5946 anon_idx++;
5949 5947 } else {
5950 5948 if (amp != NULL) {
5951 5949 anon_array_enter(amp, anon_idx,
5952 5950 &cookie);
5953 5951 ap = anon_get_ptr(amp->ahp, anon_idx++);
5954 5952 }
5955 5953
5956 5954 if (VPP_ISPPLOCK(svp) &&
5957 5955 VPP_PROT(svp) != prot) {
5958 5956
5959 5957 if (amp == NULL || ap == NULL) {
5960 5958 vp = svd->vp;
5961 5959 off = offset;
5962 5960 } else
5963 5961 swap_xlate(ap, &vp, &off);
5964 5962 if (amp != NULL)
5965 5963 anon_array_exit(&cookie);
5966 5964
5967 5965 if ((pp = page_lookup(vp, off,
5968 5966 SE_SHARED)) == NULL) {
5969 5967 panic("segvn_setprot: no page");
5970 5968 /*NOTREACHED*/
5971 5969 }
5972 5970 ASSERT(seg->s_szc == 0);
5973 5971 if ((VPP_PROT(svp) ^ prot) &
5974 5972 PROT_WRITE) {
5975 5973 if (prot & PROT_WRITE) {
5976 5974 if (!page_addclaim(
5977 5975 pp)) {
5978 5976 page_unlock(pp);
5979 5977 break;
5980 5978 }
5981 5979 } else {
5982 5980 if (!page_subclaim(
5983 5981 pp)) {
5984 5982 page_unlock(pp);
5985 5983 break;
5986 5984 }
5987 5985 }
5988 5986 }
5989 5987 page_unlock(pp);
5990 5988 } else if (amp != NULL)
5991 5989 anon_array_exit(&cookie);
5992 5990 }
5993 5991 VPP_SETPROT(svp, prot);
5994 5992 offset += PAGESIZE;
5995 5993 }
5996 5994 if (amp != NULL)
5997 5995 ANON_LOCK_EXIT(&->a_rwlock);
5998 5996
5999 5997 /*
6000 5998 * Did we terminate prematurely? If so, simply unload
6001 5999 * the translations to the things we've updated so far.
6002 6000 */
6003 6001 if (svp != evp) {
6004 6002 if (unload_done) {
6005 6003 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
6006 6004 return (IE_NOMEM);
6007 6005 }
6008 6006 len = (svp - &svd->vpage[seg_page(seg, addr)]) *
6009 6007 PAGESIZE;
6010 6008 ASSERT(seg->s_szc == 0 || IS_P2ALIGNED(len, pgsz));
6011 6009 if (len != 0)
6012 6010 hat_unload(seg->s_as->a_hat, addr,
6013 6011 len, HAT_UNLOAD);
6014 6012 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
6015 6013 return (IE_NOMEM);
6016 6014 }
6017 6015 } else {
6018 6016 segvn_vpage(seg);
6019 6017 if (svd->vpage == NULL) {
6020 6018 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
6021 6019 return (ENOMEM);
6022 6020 }
6023 6021 svd->pageprot = 1;
6024 6022 evp = &svd->vpage[seg_page(seg, addr + len)];
6025 6023 for (svp = &svd->vpage[seg_page(seg, addr)]; svp < evp; svp++) {
6026 6024 VPP_SETPROT(svp, prot);
6027 6025 }
6028 6026 }
6029 6027
6030 6028 if (unload_done) {
6031 6029 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
6032 6030 return (0);
6033 6031 }
6034 6032
6035 6033 if (((prot & PROT_WRITE) != 0 &&
6036 6034 (svd->vp != NULL || svd->type == MAP_PRIVATE)) ||
6037 6035 (prot & ~PROT_USER) == PROT_NONE) {
6038 6036 /*
6039 6037 * Either private or shared data with write access (in
6040 6038 * which case we need to throw out all former translations
6041 6039 * so that we get the right translations set up on fault
6042 6040 * and we don't allow write access to any copy-on-write pages
6043 6041 * that might be around or to prevent write access to pages
6044 6042 * representing holes in a file), or we don't have permission
6045 6043 * to access the memory at all (in which case we have to
6046 6044 * unload any current translations that might exist).
6047 6045 */
6048 6046 hat_unload(seg->s_as->a_hat, addr, len, HAT_UNLOAD);
6049 6047 } else {
6050 6048 /*
6051 6049 * A shared mapping or a private mapping in which write
6052 6050 * protection is going to be denied - just change all the
6053 6051 * protections over the range of addresses in question.
6054 6052 * segvn does not support any other attributes other
6055 6053 * than prot so we can use hat_chgattr.
6056 6054 */
6057 6055 hat_chgattr(seg->s_as->a_hat, addr, len, prot);
6058 6056 }
6059 6057
6060 6058 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
6061 6059
6062 6060 return (0);
6063 6061 }
6064 6062
6065 6063 /*
6066 6064 * segvn_setpagesize is called via SEGOP_SETPAGESIZE from as_setpagesize,
6067 6065 * to determine if the seg is capable of mapping the requested szc.
6068 6066 */
6069 6067 static int
6070 6068 segvn_setpagesize(struct seg *seg, caddr_t addr, size_t len, uint_t szc)
6071 6069 {
6072 6070 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
6073 6071 struct segvn_data *nsvd;
6074 6072 struct anon_map *amp = svd->amp;
6075 6073 struct seg *nseg;
6076 6074 caddr_t eaddr = addr + len, a;
6077 6075 size_t pgsz = page_get_pagesize(szc);
6078 6076 pgcnt_t pgcnt = page_get_pagecnt(szc);
6079 6077 int err;
6080 6078 u_offset_t off = svd->offset + (uintptr_t)(addr - seg->s_base);
6081 6079
6082 6080 ASSERT(seg->s_as && AS_WRITE_HELD(seg->s_as));
6083 6081 ASSERT(addr >= seg->s_base && eaddr <= seg->s_base + seg->s_size);
6084 6082
6085 6083 if (seg->s_szc == szc || segvn_lpg_disable != 0) {
6086 6084 return (0);
6087 6085 }
6088 6086
6089 6087 /*
6090 6088 * addr should always be pgsz aligned but eaddr may be misaligned if
6091 6089 * it's at the end of the segment.
6092 6090 *
6093 6091 * XXX we should assert this condition since as_setpagesize() logic
6094 6092 * guarantees it.
6095 6093 */
6096 6094 if (!IS_P2ALIGNED(addr, pgsz) ||
6097 6095 (!IS_P2ALIGNED(eaddr, pgsz) &&
6098 6096 eaddr != seg->s_base + seg->s_size)) {
6099 6097
6100 6098 segvn_setpgsz_align_err++;
6101 6099 return (EINVAL);
6102 6100 }
6103 6101
6104 6102 if (amp != NULL && svd->type == MAP_SHARED) {
6105 6103 ulong_t an_idx = svd->anon_index + seg_page(seg, addr);
6106 6104 if (!IS_P2ALIGNED(an_idx, pgcnt)) {
6107 6105
6108 6106 segvn_setpgsz_anon_align_err++;
6109 6107 return (EINVAL);
6110 6108 }
6111 6109 }
6112 6110
6113 6111 if ((svd->flags & MAP_NORESERVE) || seg->s_as == &kas ||
6114 6112 szc > segvn_maxpgszc) {
6115 6113 return (EINVAL);
6116 6114 }
6117 6115
6118 6116 /* paranoid check */
6119 6117 if (svd->vp != NULL &&
6120 6118 (IS_SWAPFSVP(svd->vp) || VN_ISKAS(svd->vp))) {
6121 6119 return (EINVAL);
6122 6120 }
6123 6121
6124 6122 if (seg->s_szc == 0 && svd->vp != NULL &&
6125 6123 map_addr_vacalign_check(addr, off)) {
6126 6124 return (EINVAL);
6127 6125 }
6128 6126
6129 6127 /*
6130 6128 * Check that protections are the same within new page
6131 6129 * size boundaries.
6132 6130 */
6133 6131 if (svd->pageprot) {
6134 6132 for (a = addr; a < eaddr; a += pgsz) {
6135 6133 if ((a + pgsz) > eaddr) {
6136 6134 if (!sameprot(seg, a, eaddr - a)) {
6137 6135 return (EINVAL);
6138 6136 }
6139 6137 } else {
6140 6138 if (!sameprot(seg, a, pgsz)) {
6141 6139 return (EINVAL);
6142 6140 }
6143 6141 }
6144 6142 }
6145 6143 }
6146 6144
6147 6145 /*
6148 6146 * Since we are changing page size we first have to flush
6149 6147 * the cache. This makes sure all the pagelock calls have
6150 6148 * to recheck protections.
6151 6149 */
6152 6150 if (svd->softlockcnt > 0) {
6153 6151 ASSERT(svd->tr_state == SEGVN_TR_OFF);
6154 6152
6155 6153 /*
6156 6154 * If this is shared segment non 0 softlockcnt
6157 6155 * means locked pages are still in use.
6158 6156 */
6159 6157 if (svd->type == MAP_SHARED) {
6160 6158 return (EAGAIN);
6161 6159 }
6162 6160
6163 6161 /*
6164 6162 * Since we do have the segvn writers lock nobody can fill
6165 6163 * the cache with entries belonging to this seg during
6166 6164 * the purge. The flush either succeeds or we still have
6167 6165 * pending I/Os.
6168 6166 */
6169 6167 segvn_purge(seg);
6170 6168 if (svd->softlockcnt > 0) {
6171 6169 return (EAGAIN);
6172 6170 }
6173 6171 }
6174 6172
6175 6173 if (HAT_IS_REGION_COOKIE_VALID(svd->rcookie)) {
6176 6174 ASSERT(svd->amp == NULL);
6177 6175 ASSERT(svd->tr_state == SEGVN_TR_OFF);
6178 6176 hat_leave_region(seg->s_as->a_hat, svd->rcookie,
6179 6177 HAT_REGION_TEXT);
6180 6178 svd->rcookie = HAT_INVALID_REGION_COOKIE;
6181 6179 } else if (svd->tr_state == SEGVN_TR_INIT) {
6182 6180 svd->tr_state = SEGVN_TR_OFF;
6183 6181 } else if (svd->tr_state == SEGVN_TR_ON) {
6184 6182 ASSERT(svd->amp != NULL);
6185 6183 segvn_textunrepl(seg, 1);
6186 6184 ASSERT(svd->amp == NULL && svd->tr_state == SEGVN_TR_OFF);
6187 6185 amp = NULL;
6188 6186 }
6189 6187
6190 6188 /*
6191 6189 * Operation for sub range of existing segment.
6192 6190 */
6193 6191 if (addr != seg->s_base || eaddr != (seg->s_base + seg->s_size)) {
6194 6192 if (szc < seg->s_szc) {
6195 6193 VM_STAT_ADD(segvnvmstats.demoterange[2]);
6196 6194 err = segvn_demote_range(seg, addr, len, SDR_RANGE, 0);
6197 6195 if (err == 0) {
6198 6196 return (IE_RETRY);
6199 6197 }
6200 6198 if (err == ENOMEM) {
6201 6199 return (IE_NOMEM);
6202 6200 }
6203 6201 return (err);
6204 6202 }
6205 6203 if (addr != seg->s_base) {
6206 6204 nseg = segvn_split_seg(seg, addr);
6207 6205 if (eaddr != (nseg->s_base + nseg->s_size)) {
6208 6206 /* eaddr is szc aligned */
6209 6207 (void) segvn_split_seg(nseg, eaddr);
6210 6208 }
6211 6209 return (IE_RETRY);
6212 6210 }
6213 6211 if (eaddr != (seg->s_base + seg->s_size)) {
6214 6212 /* eaddr is szc aligned */
6215 6213 (void) segvn_split_seg(seg, eaddr);
6216 6214 }
6217 6215 return (IE_RETRY);
6218 6216 }
6219 6217
6220 6218 /*
6221 6219 * Break any low level sharing and reset seg->s_szc to 0.
6222 6220 */
6223 6221 if ((err = segvn_clrszc(seg)) != 0) {
6224 6222 if (err == ENOMEM) {
6225 6223 err = IE_NOMEM;
6226 6224 }
6227 6225 return (err);
6228 6226 }
6229 6227 ASSERT(seg->s_szc == 0);
6230 6228
6231 6229 /*
6232 6230 * If the end of the current segment is not pgsz aligned
6233 6231 * then attempt to concatenate with the next segment.
6234 6232 */
6235 6233 if (!IS_P2ALIGNED(eaddr, pgsz)) {
6236 6234 nseg = AS_SEGNEXT(seg->s_as, seg);
6237 6235 if (nseg == NULL || nseg == seg || eaddr != nseg->s_base) {
6238 6236 return (ENOMEM);
6239 6237 }
6240 6238 if (nseg->s_ops != &segvn_ops) {
6241 6239 return (EINVAL);
6242 6240 }
6243 6241 nsvd = (struct segvn_data *)nseg->s_data;
6244 6242 if (nsvd->softlockcnt > 0) {
6245 6243 /*
6246 6244 * If this is shared segment non 0 softlockcnt
6247 6245 * means locked pages are still in use.
6248 6246 */
6249 6247 if (nsvd->type == MAP_SHARED) {
6250 6248 return (EAGAIN);
6251 6249 }
6252 6250 segvn_purge(nseg);
6253 6251 if (nsvd->softlockcnt > 0) {
6254 6252 return (EAGAIN);
6255 6253 }
6256 6254 }
6257 6255 err = segvn_clrszc(nseg);
6258 6256 if (err == ENOMEM) {
6259 6257 err = IE_NOMEM;
6260 6258 }
6261 6259 if (err != 0) {
6262 6260 return (err);
6263 6261 }
6264 6262 ASSERT(nsvd->rcookie == HAT_INVALID_REGION_COOKIE);
6265 6263 err = segvn_concat(seg, nseg, 1);
6266 6264 if (err == -1) {
6267 6265 return (EINVAL);
6268 6266 }
6269 6267 if (err == -2) {
6270 6268 return (IE_NOMEM);
6271 6269 }
6272 6270 return (IE_RETRY);
6273 6271 }
6274 6272
6275 6273 /*
6276 6274 * May need to re-align anon array to
6277 6275 * new szc.
6278 6276 */
6279 6277 if (amp != NULL) {
6280 6278 if (!IS_P2ALIGNED(svd->anon_index, pgcnt)) {
6281 6279 struct anon_hdr *nahp;
6282 6280
6283 6281 ASSERT(svd->type == MAP_PRIVATE);
6284 6282
6285 6283 ANON_LOCK_ENTER(&->a_rwlock, RW_WRITER);
6286 6284 ASSERT(amp->refcnt == 1);
6287 6285 nahp = anon_create(btop(amp->size), ANON_NOSLEEP);
6288 6286 if (nahp == NULL) {
6289 6287 ANON_LOCK_EXIT(&->a_rwlock);
6290 6288 return (IE_NOMEM);
6291 6289 }
6292 6290 if (anon_copy_ptr(amp->ahp, svd->anon_index,
6293 6291 nahp, 0, btop(seg->s_size), ANON_NOSLEEP)) {
6294 6292 anon_release(nahp, btop(amp->size));
6295 6293 ANON_LOCK_EXIT(&->a_rwlock);
6296 6294 return (IE_NOMEM);
6297 6295 }
6298 6296 anon_release(amp->ahp, btop(amp->size));
6299 6297 amp->ahp = nahp;
6300 6298 svd->anon_index = 0;
6301 6299 ANON_LOCK_EXIT(&->a_rwlock);
6302 6300 }
6303 6301 }
6304 6302 if (svd->vp != NULL && szc != 0) {
6305 6303 struct vattr va;
6306 6304 u_offset_t eoffpage = svd->offset;
6307 6305 va.va_mask = AT_SIZE;
6308 6306 eoffpage += seg->s_size;
6309 6307 eoffpage = btopr(eoffpage);
6310 6308 if (VOP_GETATTR(svd->vp, &va, 0, svd->cred, NULL) != 0) {
6311 6309 segvn_setpgsz_getattr_err++;
6312 6310 return (EINVAL);
6313 6311 }
6314 6312 if (btopr(va.va_size) < eoffpage) {
6315 6313 segvn_setpgsz_eof_err++;
6316 6314 return (EINVAL);
6317 6315 }
6318 6316 if (amp != NULL) {
6319 6317 /*
6320 6318 * anon_fill_cow_holes() may call VOP_GETPAGE().
6321 6319 * don't take anon map lock here to avoid holding it
6322 6320 * across VOP_GETPAGE() calls that may call back into
6323 6321 * segvn for klsutering checks. We don't really need
6324 6322 * anon map lock here since it's a private segment and
6325 6323 * we hold as level lock as writers.
6326 6324 */
6327 6325 if ((err = anon_fill_cow_holes(seg, seg->s_base,
6328 6326 amp->ahp, svd->anon_index, svd->vp, svd->offset,
6329 6327 seg->s_size, szc, svd->prot, svd->vpage,
6330 6328 svd->cred)) != 0) {
6331 6329 return (EINVAL);
6332 6330 }
6333 6331 }
6334 6332 segvn_setvnode_mpss(svd->vp);
6335 6333 }
6336 6334
6337 6335 if (amp != NULL) {
6338 6336 ANON_LOCK_ENTER(&->a_rwlock, RW_WRITER);
6339 6337 if (svd->type == MAP_PRIVATE) {
6340 6338 amp->a_szc = szc;
6341 6339 } else if (szc > amp->a_szc) {
6342 6340 amp->a_szc = szc;
6343 6341 }
6344 6342 ANON_LOCK_EXIT(&->a_rwlock);
6345 6343 }
6346 6344
6347 6345 seg->s_szc = szc;
6348 6346
6349 6347 return (0);
6350 6348 }
6351 6349
6352 6350 static int
6353 6351 segvn_clrszc(struct seg *seg)
6354 6352 {
6355 6353 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
6356 6354 struct anon_map *amp = svd->amp;
6357 6355 size_t pgsz;
6358 6356 pgcnt_t pages;
6359 6357 int err = 0;
6360 6358 caddr_t a = seg->s_base;
6361 6359 caddr_t ea = a + seg->s_size;
6362 6360 ulong_t an_idx = svd->anon_index;
6363 6361 vnode_t *vp = svd->vp;
6364 6362 struct vpage *vpage = svd->vpage;
6365 6363 page_t *anon_pl[1 + 1], *pp;
6366 6364 struct anon *ap, *oldap;
6367 6365 uint_t prot = svd->prot, vpprot;
6368 6366 int pageflag = 0;
6369 6367
6370 6368 ASSERT(AS_WRITE_HELD(seg->s_as) ||
6371 6369 SEGVN_WRITE_HELD(seg->s_as, &svd->lock));
6372 6370 ASSERT(svd->softlockcnt == 0);
6373 6371
6374 6372 if (vp == NULL && amp == NULL) {
6375 6373 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
6376 6374 seg->s_szc = 0;
6377 6375 return (0);
6378 6376 }
6379 6377
6380 6378 if (HAT_IS_REGION_COOKIE_VALID(svd->rcookie)) {
6381 6379 ASSERT(svd->amp == NULL);
6382 6380 ASSERT(svd->tr_state == SEGVN_TR_OFF);
6383 6381 hat_leave_region(seg->s_as->a_hat, svd->rcookie,
6384 6382 HAT_REGION_TEXT);
6385 6383 svd->rcookie = HAT_INVALID_REGION_COOKIE;
6386 6384 } else if (svd->tr_state == SEGVN_TR_ON) {
6387 6385 ASSERT(svd->amp != NULL);
6388 6386 segvn_textunrepl(seg, 1);
6389 6387 ASSERT(svd->amp == NULL && svd->tr_state == SEGVN_TR_OFF);
6390 6388 amp = NULL;
6391 6389 } else {
6392 6390 if (svd->tr_state != SEGVN_TR_OFF) {
6393 6391 ASSERT(svd->tr_state == SEGVN_TR_INIT);
6394 6392 svd->tr_state = SEGVN_TR_OFF;
6395 6393 }
6396 6394
6397 6395 /*
6398 6396 * do HAT_UNLOAD_UNMAP since we are changing the pagesize.
6399 6397 * unload argument is 0 when we are freeing the segment
6400 6398 * and unload was already done.
6401 6399 */
6402 6400 hat_unload(seg->s_as->a_hat, seg->s_base, seg->s_size,
6403 6401 HAT_UNLOAD_UNMAP);
6404 6402 }
6405 6403
6406 6404 if (amp == NULL || svd->type == MAP_SHARED) {
6407 6405 seg->s_szc = 0;
6408 6406 return (0);
6409 6407 }
6410 6408
6411 6409 pgsz = page_get_pagesize(seg->s_szc);
6412 6410 pages = btop(pgsz);
6413 6411
6414 6412 /*
6415 6413 * XXX anon rwlock is not really needed because this is a
6416 6414 * private segment and we are writers.
6417 6415 */
6418 6416 ANON_LOCK_ENTER(&->a_rwlock, RW_WRITER);
6419 6417
6420 6418 for (; a < ea; a += pgsz, an_idx += pages) {
6421 6419 if ((oldap = anon_get_ptr(amp->ahp, an_idx)) != NULL) {
6422 6420 ASSERT(vpage != NULL || svd->pageprot == 0);
6423 6421 if (vpage != NULL) {
6424 6422 ASSERT(sameprot(seg, a, pgsz));
6425 6423 prot = VPP_PROT(vpage);
6426 6424 pageflag = VPP_ISPPLOCK(vpage) ? LOCK_PAGE : 0;
6427 6425 }
6428 6426 if (seg->s_szc != 0) {
6429 6427 ASSERT(vp == NULL || anon_pages(amp->ahp,
6430 6428 an_idx, pages) == pages);
6431 6429 if ((err = anon_map_demotepages(amp, an_idx,
6432 6430 seg, a, prot, vpage, svd->cred)) != 0) {
6433 6431 goto out;
6434 6432 }
6435 6433 } else {
6436 6434 if (oldap->an_refcnt == 1) {
6437 6435 continue;
6438 6436 }
6439 6437 if ((err = anon_getpage(&oldap, &vpprot,
6440 6438 anon_pl, PAGESIZE, seg, a, S_READ,
6441 6439 svd->cred))) {
6442 6440 goto out;
6443 6441 }
6444 6442 if ((pp = anon_private(&ap, seg, a, prot,
6445 6443 anon_pl[0], pageflag, svd->cred)) == NULL) {
6446 6444 err = ENOMEM;
6447 6445 goto out;
6448 6446 }
6449 6447 anon_decref(oldap);
6450 6448 (void) anon_set_ptr(amp->ahp, an_idx, ap,
6451 6449 ANON_SLEEP);
6452 6450 page_unlock(pp);
6453 6451 }
6454 6452 }
6455 6453 vpage = (vpage == NULL) ? NULL : vpage + pages;
6456 6454 }
6457 6455
6458 6456 amp->a_szc = 0;
6459 6457 seg->s_szc = 0;
6460 6458 out:
6461 6459 ANON_LOCK_EXIT(&->a_rwlock);
6462 6460 return (err);
6463 6461 }
6464 6462
6465 6463 static int
6466 6464 segvn_claim_pages(
6467 6465 struct seg *seg,
6468 6466 struct vpage *svp,
6469 6467 u_offset_t off,
6470 6468 ulong_t anon_idx,
6471 6469 uint_t prot)
6472 6470 {
6473 6471 pgcnt_t pgcnt = page_get_pagecnt(seg->s_szc);
6474 6472 size_t ppasize = (pgcnt + 1) * sizeof (page_t *);
6475 6473 page_t **ppa;
6476 6474 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
6477 6475 struct anon_map *amp = svd->amp;
6478 6476 struct vpage *evp = svp + pgcnt;
6479 6477 caddr_t addr = ((uintptr_t)(svp - svd->vpage) << PAGESHIFT)
6480 6478 + seg->s_base;
6481 6479 struct anon *ap;
6482 6480 struct vnode *vp = svd->vp;
6483 6481 page_t *pp;
6484 6482 pgcnt_t pg_idx, i;
6485 6483 int err = 0;
6486 6484 anoff_t aoff;
6487 6485 int anon = (amp != NULL) ? 1 : 0;
6488 6486
6489 6487 ASSERT(svd->type == MAP_PRIVATE);
6490 6488 ASSERT(svd->vpage != NULL);
6491 6489 ASSERT(seg->s_szc != 0);
6492 6490 ASSERT(IS_P2ALIGNED(pgcnt, pgcnt));
6493 6491 ASSERT(amp == NULL || IS_P2ALIGNED(anon_idx, pgcnt));
6494 6492 ASSERT(sameprot(seg, addr, pgcnt << PAGESHIFT));
6495 6493
6496 6494 if (VPP_PROT(svp) == prot)
6497 6495 return (1);
6498 6496 if (!((VPP_PROT(svp) ^ prot) & PROT_WRITE))
6499 6497 return (1);
6500 6498
6501 6499 ppa = kmem_alloc(ppasize, KM_SLEEP);
6502 6500 if (anon && vp != NULL) {
6503 6501 if (anon_get_ptr(amp->ahp, anon_idx) == NULL) {
6504 6502 anon = 0;
6505 6503 ASSERT(!anon_pages(amp->ahp, anon_idx, pgcnt));
6506 6504 }
6507 6505 ASSERT(!anon ||
6508 6506 anon_pages(amp->ahp, anon_idx, pgcnt) == pgcnt);
6509 6507 }
6510 6508
6511 6509 for (*ppa = NULL, pg_idx = 0; svp < evp; svp++, anon_idx++) {
6512 6510 if (!VPP_ISPPLOCK(svp))
6513 6511 continue;
6514 6512 if (anon) {
6515 6513 ap = anon_get_ptr(amp->ahp, anon_idx);
6516 6514 if (ap == NULL) {
6517 6515 panic("segvn_claim_pages: no anon slot");
6518 6516 }
6519 6517 swap_xlate(ap, &vp, &aoff);
6520 6518 off = (u_offset_t)aoff;
6521 6519 }
6522 6520 ASSERT(vp != NULL);
6523 6521 if ((pp = page_lookup(vp,
6524 6522 (u_offset_t)off, SE_SHARED)) == NULL) {
6525 6523 panic("segvn_claim_pages: no page");
6526 6524 }
6527 6525 ppa[pg_idx++] = pp;
6528 6526 off += PAGESIZE;
6529 6527 }
6530 6528
6531 6529 if (ppa[0] == NULL) {
6532 6530 kmem_free(ppa, ppasize);
6533 6531 return (1);
6534 6532 }
6535 6533
6536 6534 ASSERT(pg_idx <= pgcnt);
6537 6535 ppa[pg_idx] = NULL;
6538 6536
6539 6537
6540 6538 /* Find each large page within ppa, and adjust its claim */
6541 6539
6542 6540 /* Does ppa cover a single large page? */
6543 6541 if (ppa[0]->p_szc == seg->s_szc) {
6544 6542 if (prot & PROT_WRITE)
6545 6543 err = page_addclaim_pages(ppa);
6546 6544 else
6547 6545 err = page_subclaim_pages(ppa);
6548 6546 } else {
6549 6547 for (i = 0; ppa[i]; i += pgcnt) {
6550 6548 ASSERT(IS_P2ALIGNED(page_pptonum(ppa[i]), pgcnt));
6551 6549 if (prot & PROT_WRITE)
6552 6550 err = page_addclaim_pages(&ppa[i]);
6553 6551 else
6554 6552 err = page_subclaim_pages(&ppa[i]);
6555 6553 if (err == 0)
6556 6554 break;
6557 6555 }
6558 6556 }
6559 6557
6560 6558 for (i = 0; i < pg_idx; i++) {
6561 6559 ASSERT(ppa[i] != NULL);
6562 6560 page_unlock(ppa[i]);
6563 6561 }
6564 6562
6565 6563 kmem_free(ppa, ppasize);
6566 6564 return (err);
6567 6565 }
6568 6566
6569 6567 /*
6570 6568 * Returns right (upper address) segment if split occurred.
6571 6569 * If the address is equal to the beginning or end of its segment it returns
6572 6570 * the current segment.
6573 6571 */
6574 6572 static struct seg *
6575 6573 segvn_split_seg(struct seg *seg, caddr_t addr)
6576 6574 {
6577 6575 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
6578 6576 struct seg *nseg;
6579 6577 size_t nsize;
6580 6578 struct segvn_data *nsvd;
6581 6579
6582 6580 ASSERT(AS_WRITE_HELD(seg->s_as));
6583 6581 ASSERT(svd->tr_state == SEGVN_TR_OFF);
6584 6582
6585 6583 ASSERT(addr >= seg->s_base);
6586 6584 ASSERT(addr <= seg->s_base + seg->s_size);
6587 6585 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
6588 6586
6589 6587 if (addr == seg->s_base || addr == seg->s_base + seg->s_size)
6590 6588 return (seg);
6591 6589
6592 6590 nsize = seg->s_base + seg->s_size - addr;
6593 6591 seg->s_size = addr - seg->s_base;
6594 6592 nseg = seg_alloc(seg->s_as, addr, nsize);
6595 6593 ASSERT(nseg != NULL);
6596 6594 nseg->s_ops = seg->s_ops;
6597 6595 nsvd = kmem_cache_alloc(segvn_cache, KM_SLEEP);
6598 6596 nseg->s_data = (void *)nsvd;
6599 6597 nseg->s_szc = seg->s_szc;
6600 6598 *nsvd = *svd;
6601 6599 ASSERT(nsvd->rcookie == HAT_INVALID_REGION_COOKIE);
6602 6600 nsvd->seg = nseg;
6603 6601 rw_init(&nsvd->lock, NULL, RW_DEFAULT, NULL);
6604 6602
6605 6603 if (nsvd->vp != NULL) {
6606 6604 VN_HOLD(nsvd->vp);
6607 6605 nsvd->offset = svd->offset +
6608 6606 (uintptr_t)(nseg->s_base - seg->s_base);
6609 6607 if (nsvd->type == MAP_SHARED)
6610 6608 lgrp_shm_policy_init(NULL, nsvd->vp);
6611 6609 } else {
6612 6610 /*
6613 6611 * The offset for an anonymous segment has no signifigance in
6614 6612 * terms of an offset into a file. If we were to use the above
6615 6613 * calculation instead, the structures read out of
6616 6614 * /proc/<pid>/xmap would be more difficult to decipher since
6617 6615 * it would be unclear whether two seemingly contiguous
6618 6616 * prxmap_t structures represented different segments or a
6619 6617 * single segment that had been split up into multiple prxmap_t
6620 6618 * structures (e.g. if some part of the segment had not yet
6621 6619 * been faulted in).
6622 6620 */
6623 6621 nsvd->offset = 0;
6624 6622 }
6625 6623
6626 6624 ASSERT(svd->softlockcnt == 0);
6627 6625 ASSERT(svd->softlockcnt_sbase == 0);
6628 6626 ASSERT(svd->softlockcnt_send == 0);
6629 6627 crhold(svd->cred);
6630 6628
6631 6629 if (svd->vpage != NULL) {
6632 6630 size_t bytes = vpgtob(seg_pages(seg));
6633 6631 size_t nbytes = vpgtob(seg_pages(nseg));
6634 6632 struct vpage *ovpage = svd->vpage;
6635 6633
6636 6634 svd->vpage = kmem_alloc(bytes, KM_SLEEP);
6637 6635 bcopy(ovpage, svd->vpage, bytes);
6638 6636 nsvd->vpage = kmem_alloc(nbytes, KM_SLEEP);
6639 6637 bcopy(ovpage + seg_pages(seg), nsvd->vpage, nbytes);
6640 6638 kmem_free(ovpage, bytes + nbytes);
6641 6639 }
6642 6640 if (svd->amp != NULL && svd->type == MAP_PRIVATE) {
6643 6641 struct anon_map *oamp = svd->amp, *namp;
6644 6642 struct anon_hdr *nahp;
6645 6643
6646 6644 ANON_LOCK_ENTER(&oamp->a_rwlock, RW_WRITER);
6647 6645 ASSERT(oamp->refcnt == 1);
6648 6646 nahp = anon_create(btop(seg->s_size), ANON_SLEEP);
6649 6647 (void) anon_copy_ptr(oamp->ahp, svd->anon_index,
6650 6648 nahp, 0, btop(seg->s_size), ANON_SLEEP);
6651 6649
6652 6650 namp = anonmap_alloc(nseg->s_size, 0, ANON_SLEEP);
6653 6651 namp->a_szc = nseg->s_szc;
6654 6652 (void) anon_copy_ptr(oamp->ahp,
6655 6653 svd->anon_index + btop(seg->s_size),
6656 6654 namp->ahp, 0, btop(nseg->s_size), ANON_SLEEP);
6657 6655 anon_release(oamp->ahp, btop(oamp->size));
6658 6656 oamp->ahp = nahp;
6659 6657 oamp->size = seg->s_size;
6660 6658 svd->anon_index = 0;
6661 6659 nsvd->amp = namp;
6662 6660 nsvd->anon_index = 0;
6663 6661 ANON_LOCK_EXIT(&oamp->a_rwlock);
6664 6662 } else if (svd->amp != NULL) {
6665 6663 pgcnt_t pgcnt = page_get_pagecnt(seg->s_szc);
6666 6664 ASSERT(svd->amp == nsvd->amp);
6667 6665 ASSERT(seg->s_szc <= svd->amp->a_szc);
6668 6666 nsvd->anon_index = svd->anon_index + seg_pages(seg);
6669 6667 ASSERT(IS_P2ALIGNED(nsvd->anon_index, pgcnt));
6670 6668 ANON_LOCK_ENTER(&svd->amp->a_rwlock, RW_WRITER);
6671 6669 svd->amp->refcnt++;
6672 6670 ANON_LOCK_EXIT(&svd->amp->a_rwlock);
6673 6671 }
6674 6672
6675 6673 /*
6676 6674 * Split the amount of swap reserved.
6677 6675 */
6678 6676 if (svd->swresv) {
6679 6677 /*
6680 6678 * For MAP_NORESERVE, only allocate swap reserve for pages
6681 6679 * being used. Other segments get enough to cover whole
6682 6680 * segment.
6683 6681 */
6684 6682 if (svd->flags & MAP_NORESERVE) {
6685 6683 size_t oswresv;
6686 6684
6687 6685 ASSERT(svd->amp);
6688 6686 oswresv = svd->swresv;
6689 6687 svd->swresv = ptob(anon_pages(svd->amp->ahp,
6690 6688 svd->anon_index, btop(seg->s_size)));
6691 6689 nsvd->swresv = ptob(anon_pages(nsvd->amp->ahp,
6692 6690 nsvd->anon_index, btop(nseg->s_size)));
6693 6691 ASSERT(oswresv >= (svd->swresv + nsvd->swresv));
6694 6692 } else {
6695 6693 if (svd->pageswap) {
6696 6694 svd->swresv = segvn_count_swap_by_vpages(seg);
6697 6695 ASSERT(nsvd->swresv >= svd->swresv);
6698 6696 nsvd->swresv -= svd->swresv;
6699 6697 } else {
6700 6698 ASSERT(svd->swresv == seg->s_size +
6701 6699 nseg->s_size);
6702 6700 svd->swresv = seg->s_size;
6703 6701 nsvd->swresv = nseg->s_size;
6704 6702 }
6705 6703 }
6706 6704 }
6707 6705
6708 6706 return (nseg);
6709 6707 }
6710 6708
6711 6709 /*
6712 6710 * called on memory operations (unmap, setprot, setpagesize) for a subset
6713 6711 * of a large page segment to either demote the memory range (SDR_RANGE)
6714 6712 * or the ends (SDR_END) by addr/len.
6715 6713 *
6716 6714 * returns 0 on success. returns errno, including ENOMEM, on failure.
6717 6715 */
6718 6716 static int
6719 6717 segvn_demote_range(
6720 6718 struct seg *seg,
6721 6719 caddr_t addr,
6722 6720 size_t len,
6723 6721 int flag,
6724 6722 uint_t szcvec)
6725 6723 {
6726 6724 caddr_t eaddr = addr + len;
6727 6725 caddr_t lpgaddr, lpgeaddr;
6728 6726 struct seg *nseg;
6729 6727 struct seg *badseg1 = NULL;
6730 6728 struct seg *badseg2 = NULL;
6731 6729 size_t pgsz;
6732 6730 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
6733 6731 int err;
6734 6732 uint_t szc = seg->s_szc;
6735 6733 uint_t tszcvec;
6736 6734
6737 6735 ASSERT(AS_WRITE_HELD(seg->s_as));
6738 6736 ASSERT(svd->tr_state == SEGVN_TR_OFF);
6739 6737 ASSERT(szc != 0);
6740 6738 pgsz = page_get_pagesize(szc);
6741 6739 ASSERT(seg->s_base != addr || seg->s_size != len);
6742 6740 ASSERT(addr >= seg->s_base && eaddr <= seg->s_base + seg->s_size);
6743 6741 ASSERT(svd->softlockcnt == 0);
6744 6742 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
6745 6743 ASSERT(szcvec == 0 || (flag == SDR_END && svd->type == MAP_SHARED));
6746 6744
6747 6745 CALC_LPG_REGION(pgsz, seg, addr, len, lpgaddr, lpgeaddr);
6748 6746 ASSERT(flag == SDR_RANGE || eaddr < lpgeaddr || addr > lpgaddr);
6749 6747 if (flag == SDR_RANGE) {
6750 6748 /* demote entire range */
6751 6749 badseg1 = nseg = segvn_split_seg(seg, lpgaddr);
6752 6750 (void) segvn_split_seg(nseg, lpgeaddr);
6753 6751 ASSERT(badseg1->s_base == lpgaddr);
6754 6752 ASSERT(badseg1->s_size == lpgeaddr - lpgaddr);
6755 6753 } else if (addr != lpgaddr) {
6756 6754 ASSERT(flag == SDR_END);
6757 6755 badseg1 = nseg = segvn_split_seg(seg, lpgaddr);
6758 6756 if (eaddr != lpgeaddr && eaddr > lpgaddr + pgsz &&
6759 6757 eaddr < lpgaddr + 2 * pgsz) {
6760 6758 (void) segvn_split_seg(nseg, lpgeaddr);
6761 6759 ASSERT(badseg1->s_base == lpgaddr);
6762 6760 ASSERT(badseg1->s_size == 2 * pgsz);
6763 6761 } else {
6764 6762 nseg = segvn_split_seg(nseg, lpgaddr + pgsz);
6765 6763 ASSERT(badseg1->s_base == lpgaddr);
6766 6764 ASSERT(badseg1->s_size == pgsz);
6767 6765 if (eaddr != lpgeaddr && eaddr > lpgaddr + pgsz) {
6768 6766 ASSERT(lpgeaddr - lpgaddr > 2 * pgsz);
6769 6767 nseg = segvn_split_seg(nseg, lpgeaddr - pgsz);
6770 6768 badseg2 = nseg;
6771 6769 (void) segvn_split_seg(nseg, lpgeaddr);
6772 6770 ASSERT(badseg2->s_base == lpgeaddr - pgsz);
6773 6771 ASSERT(badseg2->s_size == pgsz);
6774 6772 }
6775 6773 }
6776 6774 } else {
6777 6775 ASSERT(flag == SDR_END);
6778 6776 ASSERT(eaddr < lpgeaddr);
6779 6777 badseg1 = nseg = segvn_split_seg(seg, lpgeaddr - pgsz);
6780 6778 (void) segvn_split_seg(nseg, lpgeaddr);
6781 6779 ASSERT(badseg1->s_base == lpgeaddr - pgsz);
6782 6780 ASSERT(badseg1->s_size == pgsz);
6783 6781 }
6784 6782
6785 6783 ASSERT(badseg1 != NULL);
6786 6784 ASSERT(badseg1->s_szc == szc);
6787 6785 ASSERT(flag == SDR_RANGE || badseg1->s_size == pgsz ||
6788 6786 badseg1->s_size == 2 * pgsz);
6789 6787 ASSERT(sameprot(badseg1, badseg1->s_base, pgsz));
6790 6788 ASSERT(badseg1->s_size == pgsz ||
6791 6789 sameprot(badseg1, badseg1->s_base + pgsz, pgsz));
6792 6790 if (err = segvn_clrszc(badseg1)) {
6793 6791 return (err);
6794 6792 }
6795 6793 ASSERT(badseg1->s_szc == 0);
6796 6794
6797 6795 if (szc > 1 && (tszcvec = P2PHASE(szcvec, 1 << szc)) > 1) {
6798 6796 uint_t tszc = highbit(tszcvec) - 1;
6799 6797 caddr_t ta = MAX(addr, badseg1->s_base);
6800 6798 caddr_t te;
6801 6799 size_t tpgsz = page_get_pagesize(tszc);
6802 6800
6803 6801 ASSERT(svd->type == MAP_SHARED);
6804 6802 ASSERT(flag == SDR_END);
6805 6803 ASSERT(tszc < szc && tszc > 0);
6806 6804
6807 6805 if (eaddr > badseg1->s_base + badseg1->s_size) {
6808 6806 te = badseg1->s_base + badseg1->s_size;
6809 6807 } else {
6810 6808 te = eaddr;
6811 6809 }
6812 6810
6813 6811 ASSERT(ta <= te);
6814 6812 badseg1->s_szc = tszc;
6815 6813 if (!IS_P2ALIGNED(ta, tpgsz) || !IS_P2ALIGNED(te, tpgsz)) {
6816 6814 if (badseg2 != NULL) {
6817 6815 err = segvn_demote_range(badseg1, ta, te - ta,
6818 6816 SDR_END, tszcvec);
6819 6817 if (err != 0) {
6820 6818 return (err);
6821 6819 }
6822 6820 } else {
6823 6821 return (segvn_demote_range(badseg1, ta,
6824 6822 te - ta, SDR_END, tszcvec));
6825 6823 }
6826 6824 }
6827 6825 }
6828 6826
6829 6827 if (badseg2 == NULL)
6830 6828 return (0);
6831 6829 ASSERT(badseg2->s_szc == szc);
6832 6830 ASSERT(badseg2->s_size == pgsz);
6833 6831 ASSERT(sameprot(badseg2, badseg2->s_base, badseg2->s_size));
6834 6832 if (err = segvn_clrszc(badseg2)) {
6835 6833 return (err);
6836 6834 }
6837 6835 ASSERT(badseg2->s_szc == 0);
6838 6836
6839 6837 if (szc > 1 && (tszcvec = P2PHASE(szcvec, 1 << szc)) > 1) {
6840 6838 uint_t tszc = highbit(tszcvec) - 1;
6841 6839 size_t tpgsz = page_get_pagesize(tszc);
6842 6840
6843 6841 ASSERT(svd->type == MAP_SHARED);
6844 6842 ASSERT(flag == SDR_END);
6845 6843 ASSERT(tszc < szc && tszc > 0);
6846 6844 ASSERT(badseg2->s_base > addr);
6847 6845 ASSERT(eaddr > badseg2->s_base);
6848 6846 ASSERT(eaddr < badseg2->s_base + badseg2->s_size);
6849 6847
6850 6848 badseg2->s_szc = tszc;
6851 6849 if (!IS_P2ALIGNED(eaddr, tpgsz)) {
6852 6850 return (segvn_demote_range(badseg2, badseg2->s_base,
6853 6851 eaddr - badseg2->s_base, SDR_END, tszcvec));
6854 6852 }
6855 6853 }
6856 6854
6857 6855 return (0);
6858 6856 }
6859 6857
6860 6858 static int
6861 6859 segvn_checkprot(struct seg *seg, caddr_t addr, size_t len, uint_t prot)
6862 6860 {
6863 6861 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
6864 6862 struct vpage *vp, *evp;
6865 6863
6866 6864 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
6867 6865
6868 6866 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_READER);
6869 6867 /*
6870 6868 * If segment protection can be used, simply check against them.
6871 6869 */
6872 6870 if (svd->pageprot == 0) {
6873 6871 int err;
6874 6872
6875 6873 err = ((svd->prot & prot) != prot) ? EACCES : 0;
6876 6874 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
6877 6875 return (err);
6878 6876 }
6879 6877
6880 6878 /*
6881 6879 * Have to check down to the vpage level.
6882 6880 */
6883 6881 evp = &svd->vpage[seg_page(seg, addr + len)];
6884 6882 for (vp = &svd->vpage[seg_page(seg, addr)]; vp < evp; vp++) {
6885 6883 if ((VPP_PROT(vp) & prot) != prot) {
6886 6884 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
6887 6885 return (EACCES);
6888 6886 }
6889 6887 }
6890 6888 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
6891 6889 return (0);
6892 6890 }
6893 6891
6894 6892 static int
6895 6893 segvn_getprot(struct seg *seg, caddr_t addr, size_t len, uint_t *protv)
6896 6894 {
6897 6895 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
6898 6896 size_t pgno = seg_page(seg, addr + len) - seg_page(seg, addr) + 1;
6899 6897
6900 6898 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
6901 6899
6902 6900 if (pgno != 0) {
6903 6901 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_READER);
6904 6902 if (svd->pageprot == 0) {
6905 6903 do {
6906 6904 protv[--pgno] = svd->prot;
6907 6905 } while (pgno != 0);
6908 6906 } else {
6909 6907 size_t pgoff = seg_page(seg, addr);
6910 6908
6911 6909 do {
6912 6910 pgno--;
6913 6911 protv[pgno] = VPP_PROT(&svd->vpage[pgno+pgoff]);
6914 6912 } while (pgno != 0);
6915 6913 }
6916 6914 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
6917 6915 }
6918 6916 return (0);
6919 6917 }
6920 6918
6921 6919 static u_offset_t
6922 6920 segvn_getoffset(struct seg *seg, caddr_t addr)
6923 6921 {
6924 6922 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
6925 6923
6926 6924 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
6927 6925
6928 6926 return (svd->offset + (uintptr_t)(addr - seg->s_base));
6929 6927 }
6930 6928
6931 6929 /*ARGSUSED*/
6932 6930 static int
6933 6931 segvn_gettype(struct seg *seg, caddr_t addr)
6934 6932 {
6935 6933 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
6936 6934
6937 6935 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
6938 6936
6939 6937 return (svd->type | (svd->flags & (MAP_NORESERVE | MAP_TEXT |
6940 6938 MAP_INITDATA)));
6941 6939 }
6942 6940
6943 6941 /*ARGSUSED*/
6944 6942 static int
6945 6943 segvn_getvp(struct seg *seg, caddr_t addr, struct vnode **vpp)
6946 6944 {
6947 6945 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
6948 6946
6949 6947 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
6950 6948
6951 6949 *vpp = svd->vp;
6952 6950 return (0);
6953 6951 }
6954 6952
6955 6953 /*
6956 6954 * Check to see if it makes sense to do kluster/read ahead to
6957 6955 * addr + delta relative to the mapping at addr. We assume here
6958 6956 * that delta is a signed PAGESIZE'd multiple (which can be negative).
6959 6957 *
6960 6958 * For segvn, we currently "approve" of the action if we are
6961 6959 * still in the segment and it maps from the same vp/off,
6962 6960 * or if the advice stored in segvn_data or vpages allows it.
6963 6961 * Currently, klustering is not allowed only if MADV_RANDOM is set.
6964 6962 */
6965 6963 static int
6966 6964 segvn_kluster(struct seg *seg, caddr_t addr, ssize_t delta)
6967 6965 {
6968 6966 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
6969 6967 struct anon *oap, *ap;
6970 6968 ssize_t pd;
6971 6969 size_t page;
6972 6970 struct vnode *vp1, *vp2;
6973 6971 u_offset_t off1, off2;
6974 6972 struct anon_map *amp;
6975 6973
6976 6974 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
6977 6975 ASSERT(AS_WRITE_HELD(seg->s_as) ||
6978 6976 SEGVN_LOCK_HELD(seg->s_as, &svd->lock));
6979 6977
6980 6978 if (addr + delta < seg->s_base ||
6981 6979 addr + delta >= (seg->s_base + seg->s_size))
6982 6980 return (-1); /* exceeded segment bounds */
6983 6981
6984 6982 pd = delta / (ssize_t)PAGESIZE; /* divide to preserve sign bit */
6985 6983 page = seg_page(seg, addr);
6986 6984
6987 6985 /*
6988 6986 * Check to see if either of the pages addr or addr + delta
6989 6987 * have advice set that prevents klustering (if MADV_RANDOM advice
6990 6988 * is set for entire segment, or MADV_SEQUENTIAL is set and delta
6991 6989 * is negative).
6992 6990 */
6993 6991 if (svd->advice == MADV_RANDOM ||
6994 6992 svd->advice == MADV_SEQUENTIAL && delta < 0)
6995 6993 return (-1);
6996 6994 else if (svd->pageadvice && svd->vpage) {
6997 6995 struct vpage *bvpp, *evpp;
6998 6996
6999 6997 bvpp = &svd->vpage[page];
7000 6998 evpp = &svd->vpage[page + pd];
7001 6999 if (VPP_ADVICE(bvpp) == MADV_RANDOM ||
7002 7000 VPP_ADVICE(evpp) == MADV_SEQUENTIAL && delta < 0)
7003 7001 return (-1);
7004 7002 if (VPP_ADVICE(bvpp) != VPP_ADVICE(evpp) &&
7005 7003 VPP_ADVICE(evpp) == MADV_RANDOM)
7006 7004 return (-1);
7007 7005 }
7008 7006
7009 7007 if (svd->type == MAP_SHARED)
7010 7008 return (0); /* shared mapping - all ok */
7011 7009
7012 7010 if ((amp = svd->amp) == NULL)
7013 7011 return (0); /* off original vnode */
7014 7012
7015 7013 page += svd->anon_index;
7016 7014
7017 7015 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
7018 7016
7019 7017 oap = anon_get_ptr(amp->ahp, page);
7020 7018 ap = anon_get_ptr(amp->ahp, page + pd);
7021 7019
7022 7020 ANON_LOCK_EXIT(&->a_rwlock);
7023 7021
7024 7022 if ((oap == NULL && ap != NULL) || (oap != NULL && ap == NULL)) {
7025 7023 return (-1); /* one with and one without an anon */
7026 7024 }
7027 7025
7028 7026 if (oap == NULL) { /* implies that ap == NULL */
7029 7027 return (0); /* off original vnode */
7030 7028 }
7031 7029
7032 7030 /*
7033 7031 * Now we know we have two anon pointers - check to
7034 7032 * see if they happen to be properly allocated.
7035 7033 */
7036 7034
7037 7035 /*
7038 7036 * XXX We cheat here and don't lock the anon slots. We can't because
7039 7037 * we may have been called from the anon layer which might already
7040 7038 * have locked them. We are holding a refcnt on the slots so they
|
↓ open down ↓ |
6881 lines elided |
↑ open up ↑ |
7041 7039 * can't disappear. The worst that will happen is we'll get the wrong
7042 7040 * names (vp, off) for the slots and make a poor klustering decision.
7043 7041 */
7044 7042 swap_xlate(ap, &vp1, &off1);
7045 7043 swap_xlate(oap, &vp2, &off2);
7046 7044
7047 7045
7048 7046 if (!VOP_CMP(vp1, vp2, NULL) || off1 - off2 != delta)
7049 7047 return (-1);
7050 7048 return (0);
7051 -}
7052 -
7053 -/*
7054 - * Swap the pages of seg out to secondary storage, returning the
7055 - * number of bytes of storage freed.
7056 - *
7057 - * The basic idea is first to unload all translations and then to call
7058 - * VOP_PUTPAGE() for all newly-unmapped pages, to push them out to the
7059 - * swap device. Pages to which other segments have mappings will remain
7060 - * mapped and won't be swapped. Our caller (as_swapout) has already
7061 - * performed the unloading step.
7062 - *
7063 - * The value returned is intended to correlate well with the process's
7064 - * memory requirements. However, there are some caveats:
7065 - * 1) When given a shared segment as argument, this routine will
7066 - * only succeed in swapping out pages for the last sharer of the
7067 - * segment. (Previous callers will only have decremented mapping
7068 - * reference counts.)
7069 - * 2) We assume that the hat layer maintains a large enough translation
7070 - * cache to capture process reference patterns.
7071 - */
7072 -static size_t
7073 -segvn_swapout(struct seg *seg)
7074 -{
7075 - struct segvn_data *svd = (struct segvn_data *)seg->s_data;
7076 - struct anon_map *amp;
7077 - pgcnt_t pgcnt = 0;
7078 - pgcnt_t npages;
7079 - pgcnt_t page;
7080 - ulong_t anon_index;
7081 -
7082 - ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
7083 -
7084 - SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_READER);
7085 - /*
7086 - * Find pages unmapped by our caller and force them
7087 - * out to the virtual swap device.
7088 - */
7089 - if ((amp = svd->amp) != NULL)
7090 - anon_index = svd->anon_index;
7091 - npages = seg->s_size >> PAGESHIFT;
7092 - for (page = 0; page < npages; page++) {
7093 - page_t *pp;
7094 - struct anon *ap;
7095 - struct vnode *vp;
7096 - u_offset_t off;
7097 - anon_sync_obj_t cookie;
7098 -
7099 - /*
7100 - * Obtain <vp, off> pair for the page, then look it up.
7101 - *
7102 - * Note that this code is willing to consider regular
7103 - * pages as well as anon pages. Is this appropriate here?
7104 - */
7105 - ap = NULL;
7106 - if (amp != NULL) {
7107 - ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
7108 - if (anon_array_try_enter(amp, anon_index + page,
7109 - &cookie)) {
7110 - ANON_LOCK_EXIT(&->a_rwlock);
7111 - continue;
7112 - }
7113 - ap = anon_get_ptr(amp->ahp, anon_index + page);
7114 - if (ap != NULL) {
7115 - swap_xlate(ap, &vp, &off);
7116 - } else {
7117 - vp = svd->vp;
7118 - off = svd->offset + ptob(page);
7119 - }
7120 - anon_array_exit(&cookie);
7121 - ANON_LOCK_EXIT(&->a_rwlock);
7122 - } else {
7123 - vp = svd->vp;
7124 - off = svd->offset + ptob(page);
7125 - }
7126 - if (vp == NULL) { /* untouched zfod page */
7127 - ASSERT(ap == NULL);
7128 - continue;
7129 - }
7130 -
7131 - pp = page_lookup_nowait(vp, off, SE_SHARED);
7132 - if (pp == NULL)
7133 - continue;
7134 -
7135 -
7136 - /*
7137 - * Examine the page to see whether it can be tossed out,
7138 - * keeping track of how many we've found.
7139 - */
7140 - if (!page_tryupgrade(pp)) {
7141 - /*
7142 - * If the page has an i/o lock and no mappings,
7143 - * it's very likely that the page is being
7144 - * written out as a result of klustering.
7145 - * Assume this is so and take credit for it here.
7146 - */
7147 - if (!page_io_trylock(pp)) {
7148 - if (!hat_page_is_mapped(pp))
7149 - pgcnt++;
7150 - } else {
7151 - page_io_unlock(pp);
7152 - }
7153 - page_unlock(pp);
7154 - continue;
7155 - }
7156 - ASSERT(!page_iolock_assert(pp));
7157 -
7158 -
7159 - /*
7160 - * Skip if page is locked or has mappings.
7161 - * We don't need the page_struct_lock to look at lckcnt
7162 - * and cowcnt because the page is exclusive locked.
7163 - */
7164 - if (pp->p_lckcnt != 0 || pp->p_cowcnt != 0 ||
7165 - hat_page_is_mapped(pp)) {
7166 - page_unlock(pp);
7167 - continue;
7168 - }
7169 -
7170 - /*
7171 - * dispose skips large pages so try to demote first.
7172 - */
7173 - if (pp->p_szc != 0 && !page_try_demote_pages(pp)) {
7174 - page_unlock(pp);
7175 - /*
7176 - * XXX should skip the remaining page_t's of this
7177 - * large page.
7178 - */
7179 - continue;
7180 - }
7181 -
7182 - ASSERT(pp->p_szc == 0);
7183 -
7184 - /*
7185 - * No longer mapped -- we can toss it out. How
7186 - * we do so depends on whether or not it's dirty.
7187 - */
7188 - if (hat_ismod(pp) && pp->p_vnode) {
7189 - /*
7190 - * We must clean the page before it can be
7191 - * freed. Setting B_FREE will cause pvn_done
7192 - * to free the page when the i/o completes.
7193 - * XXX: This also causes it to be accounted
7194 - * as a pageout instead of a swap: need
7195 - * B_SWAPOUT bit to use instead of B_FREE.
7196 - *
7197 - * Hold the vnode before releasing the page lock
7198 - * to prevent it from being freed and re-used by
7199 - * some other thread.
7200 - */
7201 - VN_HOLD(vp);
7202 - page_unlock(pp);
7203 -
7204 - /*
7205 - * Queue all i/o requests for the pageout thread
7206 - * to avoid saturating the pageout devices.
7207 - */
7208 - if (!queue_io_request(vp, off))
7209 - VN_RELE(vp);
7210 - } else {
7211 - /*
7212 - * The page was clean, free it.
7213 - *
7214 - * XXX: Can we ever encounter modified pages
7215 - * with no associated vnode here?
7216 - */
7217 - ASSERT(pp->p_vnode != NULL);
7218 - /*LINTED: constant in conditional context*/
7219 - VN_DISPOSE(pp, B_FREE, 0, kcred);
7220 - }
7221 -
7222 - /*
7223 - * Credit now even if i/o is in progress.
7224 - */
7225 - pgcnt++;
7226 - }
7227 - SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7228 -
7229 - /*
7230 - * Wakeup pageout to initiate i/o on all queued requests.
7231 - */
7232 - cv_signal_pageout();
7233 - return (ptob(pgcnt));
7234 7049 }
7235 7050
7236 7051 /*
7237 7052 * Synchronize primary storage cache with real object in virtual memory.
7238 7053 *
7239 7054 * XXX - Anonymous pages should not be sync'ed out at all.
7240 7055 */
7241 7056 static int
7242 7057 segvn_sync(struct seg *seg, caddr_t addr, size_t len, int attr, uint_t flags)
7243 7058 {
7244 7059 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
7245 7060 struct vpage *vpp;
7246 7061 page_t *pp;
7247 7062 u_offset_t offset;
7248 7063 struct vnode *vp;
7249 7064 u_offset_t off;
7250 7065 caddr_t eaddr;
7251 7066 int bflags;
7252 7067 int err = 0;
7253 7068 int segtype;
7254 7069 int pageprot;
7255 7070 int prot;
7256 7071 ulong_t anon_index;
7257 7072 struct anon_map *amp;
7258 7073 struct anon *ap;
7259 7074 anon_sync_obj_t cookie;
7260 7075
7261 7076 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
7262 7077
7263 7078 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_READER);
7264 7079
7265 7080 if (svd->softlockcnt > 0) {
7266 7081 /*
7267 7082 * If this is shared segment non 0 softlockcnt
7268 7083 * means locked pages are still in use.
7269 7084 */
7270 7085 if (svd->type == MAP_SHARED) {
7271 7086 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7272 7087 return (EAGAIN);
7273 7088 }
7274 7089
7275 7090 /*
7276 7091 * flush all pages from seg cache
7277 7092 * otherwise we may deadlock in swap_putpage
7278 7093 * for B_INVAL page (4175402).
7279 7094 *
7280 7095 * Even if we grab segvn WRITER's lock
7281 7096 * here, there might be another thread which could've
7282 7097 * successfully performed lookup/insert just before
7283 7098 * we acquired the lock here. So, grabbing either
7284 7099 * lock here is of not much use. Until we devise
7285 7100 * a strategy at upper layers to solve the
7286 7101 * synchronization issues completely, we expect
7287 7102 * applications to handle this appropriately.
7288 7103 */
7289 7104 segvn_purge(seg);
7290 7105 if (svd->softlockcnt > 0) {
7291 7106 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7292 7107 return (EAGAIN);
7293 7108 }
7294 7109 } else if (svd->type == MAP_SHARED && svd->amp != NULL &&
7295 7110 svd->amp->a_softlockcnt > 0) {
7296 7111 /*
7297 7112 * Try to purge this amp's entries from pcache. It will
7298 7113 * succeed only if other segments that share the amp have no
7299 7114 * outstanding softlock's.
7300 7115 */
7301 7116 segvn_purge(seg);
7302 7117 if (svd->amp->a_softlockcnt > 0 || svd->softlockcnt > 0) {
7303 7118 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7304 7119 return (EAGAIN);
7305 7120 }
7306 7121 }
7307 7122
7308 7123 vpp = svd->vpage;
7309 7124 offset = svd->offset + (uintptr_t)(addr - seg->s_base);
7310 7125 bflags = ((flags & MS_ASYNC) ? B_ASYNC : 0) |
7311 7126 ((flags & MS_INVALIDATE) ? B_INVAL : 0);
7312 7127
7313 7128 if (attr) {
7314 7129 pageprot = attr & ~(SHARED|PRIVATE);
7315 7130 segtype = (attr & SHARED) ? MAP_SHARED : MAP_PRIVATE;
7316 7131
7317 7132 /*
7318 7133 * We are done if the segment types don't match
7319 7134 * or if we have segment level protections and
7320 7135 * they don't match.
7321 7136 */
7322 7137 if (svd->type != segtype) {
7323 7138 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7324 7139 return (0);
7325 7140 }
7326 7141 if (vpp == NULL) {
7327 7142 if (svd->prot != pageprot) {
7328 7143 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7329 7144 return (0);
7330 7145 }
7331 7146 prot = svd->prot;
7332 7147 } else
7333 7148 vpp = &svd->vpage[seg_page(seg, addr)];
7334 7149
7335 7150 } else if (svd->vp && svd->amp == NULL &&
7336 7151 (flags & MS_INVALIDATE) == 0) {
7337 7152
7338 7153 /*
7339 7154 * No attributes, no anonymous pages and MS_INVALIDATE flag
7340 7155 * is not on, just use one big request.
7341 7156 */
7342 7157 err = VOP_PUTPAGE(svd->vp, (offset_t)offset, len,
7343 7158 bflags, svd->cred, NULL);
7344 7159 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7345 7160 return (err);
7346 7161 }
7347 7162
7348 7163 if ((amp = svd->amp) != NULL)
7349 7164 anon_index = svd->anon_index + seg_page(seg, addr);
7350 7165
7351 7166 for (eaddr = addr + len; addr < eaddr; addr += PAGESIZE) {
7352 7167 ap = NULL;
7353 7168 if (amp != NULL) {
7354 7169 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
7355 7170 anon_array_enter(amp, anon_index, &cookie);
7356 7171 ap = anon_get_ptr(amp->ahp, anon_index++);
7357 7172 if (ap != NULL) {
7358 7173 swap_xlate(ap, &vp, &off);
7359 7174 } else {
7360 7175 vp = svd->vp;
7361 7176 off = offset;
7362 7177 }
7363 7178 anon_array_exit(&cookie);
7364 7179 ANON_LOCK_EXIT(&->a_rwlock);
7365 7180 } else {
7366 7181 vp = svd->vp;
7367 7182 off = offset;
7368 7183 }
7369 7184 offset += PAGESIZE;
7370 7185
7371 7186 if (vp == NULL) /* untouched zfod page */
7372 7187 continue;
7373 7188
7374 7189 if (attr) {
7375 7190 if (vpp) {
7376 7191 prot = VPP_PROT(vpp);
7377 7192 vpp++;
7378 7193 }
7379 7194 if (prot != pageprot) {
7380 7195 continue;
7381 7196 }
7382 7197 }
7383 7198
7384 7199 /*
7385 7200 * See if any of these pages are locked -- if so, then we
7386 7201 * will have to truncate an invalidate request at the first
7387 7202 * locked one. We don't need the page_struct_lock to test
7388 7203 * as this is only advisory; even if we acquire it someone
7389 7204 * might race in and lock the page after we unlock and before
7390 7205 * we do the PUTPAGE, then PUTPAGE simply does nothing.
7391 7206 */
7392 7207 if (flags & MS_INVALIDATE) {
7393 7208 if ((pp = page_lookup(vp, off, SE_SHARED)) != NULL) {
7394 7209 if (pp->p_lckcnt != 0 || pp->p_cowcnt != 0) {
7395 7210 page_unlock(pp);
7396 7211 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7397 7212 return (EBUSY);
7398 7213 }
7399 7214 if (ap != NULL && pp->p_szc != 0 &&
7400 7215 page_tryupgrade(pp)) {
7401 7216 if (pp->p_lckcnt == 0 &&
7402 7217 pp->p_cowcnt == 0) {
7403 7218 /*
7404 7219 * swapfs VN_DISPOSE() won't
7405 7220 * invalidate large pages.
7406 7221 * Attempt to demote.
7407 7222 * XXX can't help it if it
7408 7223 * fails. But for swapfs
7409 7224 * pages it is no big deal.
7410 7225 */
7411 7226 (void) page_try_demote_pages(
7412 7227 pp);
7413 7228 }
7414 7229 }
7415 7230 page_unlock(pp);
7416 7231 }
7417 7232 } else if (svd->type == MAP_SHARED && amp != NULL) {
7418 7233 /*
7419 7234 * Avoid writing out to disk ISM's large pages
7420 7235 * because segspt_free_pages() relies on NULL an_pvp
7421 7236 * of anon slots of such pages.
7422 7237 */
7423 7238
7424 7239 ASSERT(svd->vp == NULL);
7425 7240 /*
7426 7241 * swapfs uses page_lookup_nowait if not freeing or
7427 7242 * invalidating and skips a page if
7428 7243 * page_lookup_nowait returns NULL.
7429 7244 */
7430 7245 pp = page_lookup_nowait(vp, off, SE_SHARED);
7431 7246 if (pp == NULL) {
7432 7247 continue;
7433 7248 }
7434 7249 if (pp->p_szc != 0) {
7435 7250 page_unlock(pp);
7436 7251 continue;
7437 7252 }
7438 7253
7439 7254 /*
7440 7255 * Note ISM pages are created large so (vp, off)'s
7441 7256 * page cannot suddenly become large after we unlock
7442 7257 * pp.
7443 7258 */
7444 7259 page_unlock(pp);
7445 7260 }
7446 7261 /*
7447 7262 * XXX - Should ultimately try to kluster
7448 7263 * calls to VOP_PUTPAGE() for performance.
7449 7264 */
7450 7265 VN_HOLD(vp);
7451 7266 err = VOP_PUTPAGE(vp, (offset_t)off, PAGESIZE,
7452 7267 (bflags | (IS_SWAPFSVP(vp) ? B_PAGE_NOWAIT : 0)),
7453 7268 svd->cred, NULL);
7454 7269
7455 7270 VN_RELE(vp);
7456 7271 if (err)
7457 7272 break;
7458 7273 }
7459 7274 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7460 7275 return (err);
7461 7276 }
7462 7277
7463 7278 /*
7464 7279 * Determine if we have data corresponding to pages in the
7465 7280 * primary storage virtual memory cache (i.e., "in core").
7466 7281 */
7467 7282 static size_t
7468 7283 segvn_incore(struct seg *seg, caddr_t addr, size_t len, char *vec)
7469 7284 {
7470 7285 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
7471 7286 struct vnode *vp, *avp;
7472 7287 u_offset_t offset, aoffset;
7473 7288 size_t p, ep;
7474 7289 int ret;
7475 7290 struct vpage *vpp;
7476 7291 page_t *pp;
7477 7292 uint_t start;
7478 7293 struct anon_map *amp; /* XXX - for locknest */
7479 7294 struct anon *ap;
7480 7295 uint_t attr;
7481 7296 anon_sync_obj_t cookie;
7482 7297
7483 7298 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
7484 7299
7485 7300 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_READER);
7486 7301 if (svd->amp == NULL && svd->vp == NULL) {
7487 7302 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7488 7303 bzero(vec, btopr(len));
7489 7304 return (len); /* no anonymous pages created yet */
7490 7305 }
7491 7306
7492 7307 p = seg_page(seg, addr);
7493 7308 ep = seg_page(seg, addr + len);
7494 7309 start = svd->vp ? SEG_PAGE_VNODEBACKED : 0;
7495 7310
7496 7311 amp = svd->amp;
7497 7312 for (; p < ep; p++, addr += PAGESIZE) {
7498 7313 vpp = (svd->vpage) ? &svd->vpage[p]: NULL;
7499 7314 ret = start;
7500 7315 ap = NULL;
7501 7316 avp = NULL;
7502 7317 /* Grab the vnode/offset for the anon slot */
7503 7318 if (amp != NULL) {
7504 7319 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
7505 7320 anon_array_enter(amp, svd->anon_index + p, &cookie);
7506 7321 ap = anon_get_ptr(amp->ahp, svd->anon_index + p);
7507 7322 if (ap != NULL) {
7508 7323 swap_xlate(ap, &avp, &aoffset);
7509 7324 }
7510 7325 anon_array_exit(&cookie);
7511 7326 ANON_LOCK_EXIT(&->a_rwlock);
7512 7327 }
7513 7328 if ((avp != NULL) && page_exists(avp, aoffset)) {
7514 7329 /* A page exists for the anon slot */
7515 7330 ret |= SEG_PAGE_INCORE;
7516 7331
7517 7332 /*
7518 7333 * If page is mapped and writable
7519 7334 */
7520 7335 attr = (uint_t)0;
7521 7336 if ((hat_getattr(seg->s_as->a_hat, addr,
7522 7337 &attr) != -1) && (attr & PROT_WRITE)) {
7523 7338 ret |= SEG_PAGE_ANON;
7524 7339 }
7525 7340 /*
7526 7341 * Don't get page_struct lock for lckcnt and cowcnt,
7527 7342 * since this is purely advisory.
7528 7343 */
7529 7344 if ((pp = page_lookup_nowait(avp, aoffset,
7530 7345 SE_SHARED)) != NULL) {
7531 7346 if (pp->p_lckcnt)
7532 7347 ret |= SEG_PAGE_SOFTLOCK;
7533 7348 if (pp->p_cowcnt)
7534 7349 ret |= SEG_PAGE_HASCOW;
7535 7350 page_unlock(pp);
7536 7351 }
7537 7352 }
7538 7353
7539 7354 /* Gather vnode statistics */
7540 7355 vp = svd->vp;
7541 7356 offset = svd->offset + (uintptr_t)(addr - seg->s_base);
7542 7357
7543 7358 if (vp != NULL) {
7544 7359 /*
7545 7360 * Try to obtain a "shared" lock on the page
7546 7361 * without blocking. If this fails, determine
7547 7362 * if the page is in memory.
7548 7363 */
7549 7364 pp = page_lookup_nowait(vp, offset, SE_SHARED);
7550 7365 if ((pp == NULL) && (page_exists(vp, offset))) {
7551 7366 /* Page is incore, and is named */
7552 7367 ret |= (SEG_PAGE_INCORE | SEG_PAGE_VNODE);
7553 7368 }
7554 7369 /*
7555 7370 * Don't get page_struct lock for lckcnt and cowcnt,
7556 7371 * since this is purely advisory.
7557 7372 */
7558 7373 if (pp != NULL) {
7559 7374 ret |= (SEG_PAGE_INCORE | SEG_PAGE_VNODE);
7560 7375 if (pp->p_lckcnt)
7561 7376 ret |= SEG_PAGE_SOFTLOCK;
7562 7377 if (pp->p_cowcnt)
7563 7378 ret |= SEG_PAGE_HASCOW;
7564 7379 page_unlock(pp);
7565 7380 }
7566 7381 }
7567 7382
7568 7383 /* Gather virtual page information */
7569 7384 if (vpp) {
7570 7385 if (VPP_ISPPLOCK(vpp))
7571 7386 ret |= SEG_PAGE_LOCKED;
7572 7387 vpp++;
7573 7388 }
7574 7389
7575 7390 *vec++ = (char)ret;
7576 7391 }
7577 7392 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7578 7393 return (len);
7579 7394 }
7580 7395
7581 7396 /*
7582 7397 * Statement for p_cowcnts/p_lckcnts.
7583 7398 *
7584 7399 * p_cowcnt is updated while mlock/munlocking MAP_PRIVATE and PROT_WRITE region
7585 7400 * irrespective of the following factors or anything else:
7586 7401 *
7587 7402 * (1) anon slots are populated or not
7588 7403 * (2) cow is broken or not
7589 7404 * (3) refcnt on ap is 1 or greater than 1
7590 7405 *
7591 7406 * If it's not MAP_PRIVATE and PROT_WRITE, p_lckcnt is updated during mlock
7592 7407 * and munlock.
7593 7408 *
7594 7409 *
7595 7410 * Handling p_cowcnts/p_lckcnts during copy-on-write fault:
7596 7411 *
7597 7412 * if vpage has PROT_WRITE
7598 7413 * transfer cowcnt on the oldpage -> cowcnt on the newpage
7599 7414 * else
7600 7415 * transfer lckcnt on the oldpage -> lckcnt on the newpage
7601 7416 *
7602 7417 * During copy-on-write, decrement p_cowcnt on the oldpage and increment
7603 7418 * p_cowcnt on the newpage *if* the corresponding vpage has PROT_WRITE.
7604 7419 *
7605 7420 * We may also break COW if softlocking on read access in the physio case.
7606 7421 * In this case, vpage may not have PROT_WRITE. So, we need to decrement
7607 7422 * p_lckcnt on the oldpage and increment p_lckcnt on the newpage *if* the
7608 7423 * vpage doesn't have PROT_WRITE.
7609 7424 *
7610 7425 *
7611 7426 * Handling p_cowcnts/p_lckcnts during mprotect on mlocked region:
7612 7427 *
7613 7428 * If a MAP_PRIVATE region loses PROT_WRITE, we decrement p_cowcnt and
7614 7429 * increment p_lckcnt by calling page_subclaim() which takes care of
7615 7430 * availrmem accounting and p_lckcnt overflow.
7616 7431 *
7617 7432 * If a MAP_PRIVATE region gains PROT_WRITE, we decrement p_lckcnt and
7618 7433 * increment p_cowcnt by calling page_addclaim() which takes care of
7619 7434 * availrmem availability and p_cowcnt overflow.
7620 7435 */
7621 7436
7622 7437 /*
7623 7438 * Lock down (or unlock) pages mapped by this segment.
7624 7439 *
7625 7440 * XXX only creates PAGESIZE pages if anon slots are not initialized.
7626 7441 * At fault time they will be relocated into larger pages.
7627 7442 */
7628 7443 static int
7629 7444 segvn_lockop(struct seg *seg, caddr_t addr, size_t len,
7630 7445 int attr, int op, ulong_t *lockmap, size_t pos)
7631 7446 {
7632 7447 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
7633 7448 struct vpage *vpp;
7634 7449 struct vpage *evp;
7635 7450 page_t *pp;
7636 7451 u_offset_t offset;
7637 7452 u_offset_t off;
7638 7453 int segtype;
7639 7454 int pageprot;
7640 7455 int claim;
7641 7456 struct vnode *vp;
7642 7457 ulong_t anon_index;
7643 7458 struct anon_map *amp;
7644 7459 struct anon *ap;
7645 7460 struct vattr va;
7646 7461 anon_sync_obj_t cookie;
7647 7462 struct kshmid *sp = NULL;
7648 7463 struct proc *p = curproc;
7649 7464 kproject_t *proj = NULL;
7650 7465 int chargeproc = 1;
7651 7466 size_t locked_bytes = 0;
7652 7467 size_t unlocked_bytes = 0;
7653 7468 int err = 0;
7654 7469
7655 7470 /*
7656 7471 * Hold write lock on address space because may split or concatenate
7657 7472 * segments
7658 7473 */
7659 7474 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
7660 7475
7661 7476 /*
7662 7477 * If this is a shm, use shm's project and zone, else use
7663 7478 * project and zone of calling process
7664 7479 */
7665 7480
7666 7481 /* Determine if this segment backs a sysV shm */
7667 7482 if (svd->amp != NULL && svd->amp->a_sp != NULL) {
7668 7483 ASSERT(svd->type == MAP_SHARED);
7669 7484 ASSERT(svd->tr_state == SEGVN_TR_OFF);
7670 7485 sp = svd->amp->a_sp;
7671 7486 proj = sp->shm_perm.ipc_proj;
7672 7487 chargeproc = 0;
7673 7488 }
7674 7489
7675 7490 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_WRITER);
7676 7491 if (attr) {
7677 7492 pageprot = attr & ~(SHARED|PRIVATE);
7678 7493 segtype = attr & SHARED ? MAP_SHARED : MAP_PRIVATE;
7679 7494
7680 7495 /*
7681 7496 * We are done if the segment types don't match
7682 7497 * or if we have segment level protections and
7683 7498 * they don't match.
7684 7499 */
7685 7500 if (svd->type != segtype) {
7686 7501 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7687 7502 return (0);
7688 7503 }
7689 7504 if (svd->pageprot == 0 && svd->prot != pageprot) {
7690 7505 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7691 7506 return (0);
7692 7507 }
7693 7508 }
7694 7509
7695 7510 if (op == MC_LOCK) {
7696 7511 if (svd->tr_state == SEGVN_TR_INIT) {
7697 7512 svd->tr_state = SEGVN_TR_OFF;
7698 7513 } else if (svd->tr_state == SEGVN_TR_ON) {
7699 7514 ASSERT(svd->amp != NULL);
7700 7515 segvn_textunrepl(seg, 0);
7701 7516 ASSERT(svd->amp == NULL &&
7702 7517 svd->tr_state == SEGVN_TR_OFF);
7703 7518 }
7704 7519 }
7705 7520
7706 7521 /*
7707 7522 * If we're locking, then we must create a vpage structure if
7708 7523 * none exists. If we're unlocking, then check to see if there
7709 7524 * is a vpage -- if not, then we could not have locked anything.
7710 7525 */
7711 7526
7712 7527 if ((vpp = svd->vpage) == NULL) {
7713 7528 if (op == MC_LOCK) {
7714 7529 segvn_vpage(seg);
7715 7530 if (svd->vpage == NULL) {
7716 7531 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7717 7532 return (ENOMEM);
7718 7533 }
7719 7534 } else {
7720 7535 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7721 7536 return (0);
7722 7537 }
7723 7538 }
7724 7539
7725 7540 /*
7726 7541 * The anonymous data vector (i.e., previously
7727 7542 * unreferenced mapping to swap space) can be allocated
7728 7543 * by lazily testing for its existence.
7729 7544 */
7730 7545 if (op == MC_LOCK && svd->amp == NULL && svd->vp == NULL) {
7731 7546 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
7732 7547 svd->amp = anonmap_alloc(seg->s_size, 0, ANON_SLEEP);
7733 7548 svd->amp->a_szc = seg->s_szc;
7734 7549 }
7735 7550
7736 7551 if ((amp = svd->amp) != NULL) {
7737 7552 anon_index = svd->anon_index + seg_page(seg, addr);
7738 7553 }
7739 7554
7740 7555 offset = svd->offset + (uintptr_t)(addr - seg->s_base);
7741 7556 evp = &svd->vpage[seg_page(seg, addr + len)];
7742 7557
7743 7558 if (sp != NULL)
7744 7559 mutex_enter(&sp->shm_mlock);
7745 7560
7746 7561 /* determine number of unlocked bytes in range for lock operation */
7747 7562 if (op == MC_LOCK) {
7748 7563
7749 7564 if (sp == NULL) {
7750 7565 for (vpp = &svd->vpage[seg_page(seg, addr)]; vpp < evp;
7751 7566 vpp++) {
7752 7567 if (!VPP_ISPPLOCK(vpp))
7753 7568 unlocked_bytes += PAGESIZE;
7754 7569 }
7755 7570 } else {
7756 7571 ulong_t i_idx, i_edx;
7757 7572 anon_sync_obj_t i_cookie;
7758 7573 struct anon *i_ap;
7759 7574 struct vnode *i_vp;
7760 7575 u_offset_t i_off;
7761 7576
7762 7577 /* Only count sysV pages once for locked memory */
7763 7578 i_edx = svd->anon_index + seg_page(seg, addr + len);
7764 7579 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
7765 7580 for (i_idx = anon_index; i_idx < i_edx; i_idx++) {
7766 7581 anon_array_enter(amp, i_idx, &i_cookie);
7767 7582 i_ap = anon_get_ptr(amp->ahp, i_idx);
7768 7583 if (i_ap == NULL) {
7769 7584 unlocked_bytes += PAGESIZE;
7770 7585 anon_array_exit(&i_cookie);
7771 7586 continue;
7772 7587 }
7773 7588 swap_xlate(i_ap, &i_vp, &i_off);
7774 7589 anon_array_exit(&i_cookie);
7775 7590 pp = page_lookup(i_vp, i_off, SE_SHARED);
7776 7591 if (pp == NULL) {
7777 7592 unlocked_bytes += PAGESIZE;
7778 7593 continue;
7779 7594 } else if (pp->p_lckcnt == 0)
7780 7595 unlocked_bytes += PAGESIZE;
7781 7596 page_unlock(pp);
7782 7597 }
7783 7598 ANON_LOCK_EXIT(&->a_rwlock);
7784 7599 }
7785 7600
7786 7601 mutex_enter(&p->p_lock);
7787 7602 err = rctl_incr_locked_mem(p, proj, unlocked_bytes,
7788 7603 chargeproc);
7789 7604 mutex_exit(&p->p_lock);
7790 7605
7791 7606 if (err) {
7792 7607 if (sp != NULL)
7793 7608 mutex_exit(&sp->shm_mlock);
7794 7609 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
7795 7610 return (err);
7796 7611 }
7797 7612 }
7798 7613 /*
7799 7614 * Loop over all pages in the range. Process if we're locking and
7800 7615 * page has not already been locked in this mapping; or if we're
7801 7616 * unlocking and the page has been locked.
7802 7617 */
7803 7618 for (vpp = &svd->vpage[seg_page(seg, addr)]; vpp < evp;
7804 7619 vpp++, pos++, addr += PAGESIZE, offset += PAGESIZE, anon_index++) {
7805 7620 if ((attr == 0 || VPP_PROT(vpp) == pageprot) &&
7806 7621 ((op == MC_LOCK && !VPP_ISPPLOCK(vpp)) ||
7807 7622 (op == MC_UNLOCK && VPP_ISPPLOCK(vpp)))) {
7808 7623
7809 7624 if (amp != NULL)
7810 7625 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
7811 7626 /*
7812 7627 * If this isn't a MAP_NORESERVE segment and
7813 7628 * we're locking, allocate anon slots if they
7814 7629 * don't exist. The page is brought in later on.
7815 7630 */
7816 7631 if (op == MC_LOCK && svd->vp == NULL &&
7817 7632 ((svd->flags & MAP_NORESERVE) == 0) &&
7818 7633 amp != NULL &&
7819 7634 ((ap = anon_get_ptr(amp->ahp, anon_index))
7820 7635 == NULL)) {
7821 7636 anon_array_enter(amp, anon_index, &cookie);
7822 7637
7823 7638 if ((ap = anon_get_ptr(amp->ahp,
7824 7639 anon_index)) == NULL) {
7825 7640 pp = anon_zero(seg, addr, &ap,
7826 7641 svd->cred);
7827 7642 if (pp == NULL) {
7828 7643 anon_array_exit(&cookie);
7829 7644 ANON_LOCK_EXIT(&->a_rwlock);
7830 7645 err = ENOMEM;
7831 7646 goto out;
7832 7647 }
7833 7648 ASSERT(anon_get_ptr(amp->ahp,
7834 7649 anon_index) == NULL);
7835 7650 (void) anon_set_ptr(amp->ahp,
7836 7651 anon_index, ap, ANON_SLEEP);
7837 7652 page_unlock(pp);
7838 7653 }
7839 7654 anon_array_exit(&cookie);
7840 7655 }
7841 7656
7842 7657 /*
7843 7658 * Get name for page, accounting for
7844 7659 * existence of private copy.
7845 7660 */
7846 7661 ap = NULL;
7847 7662 if (amp != NULL) {
7848 7663 anon_array_enter(amp, anon_index, &cookie);
7849 7664 ap = anon_get_ptr(amp->ahp, anon_index);
7850 7665 if (ap != NULL) {
7851 7666 swap_xlate(ap, &vp, &off);
7852 7667 } else {
7853 7668 if (svd->vp == NULL &&
7854 7669 (svd->flags & MAP_NORESERVE)) {
7855 7670 anon_array_exit(&cookie);
7856 7671 ANON_LOCK_EXIT(&->a_rwlock);
7857 7672 continue;
7858 7673 }
7859 7674 vp = svd->vp;
7860 7675 off = offset;
7861 7676 }
7862 7677 if (op != MC_LOCK || ap == NULL) {
7863 7678 anon_array_exit(&cookie);
7864 7679 ANON_LOCK_EXIT(&->a_rwlock);
7865 7680 }
7866 7681 } else {
7867 7682 vp = svd->vp;
7868 7683 off = offset;
7869 7684 }
7870 7685
7871 7686 /*
7872 7687 * Get page frame. It's ok if the page is
7873 7688 * not available when we're unlocking, as this
7874 7689 * may simply mean that a page we locked got
7875 7690 * truncated out of existence after we locked it.
7876 7691 *
7877 7692 * Invoke VOP_GETPAGE() to obtain the page struct
7878 7693 * since we may need to read it from disk if its
7879 7694 * been paged out.
7880 7695 */
7881 7696 if (op != MC_LOCK)
7882 7697 pp = page_lookup(vp, off, SE_SHARED);
7883 7698 else {
7884 7699 page_t *pl[1 + 1];
7885 7700 int error;
7886 7701
7887 7702 ASSERT(vp != NULL);
7888 7703
7889 7704 error = VOP_GETPAGE(vp, (offset_t)off, PAGESIZE,
7890 7705 (uint_t *)NULL, pl, PAGESIZE, seg, addr,
7891 7706 S_OTHER, svd->cred, NULL);
7892 7707
7893 7708 if (error && ap != NULL) {
7894 7709 anon_array_exit(&cookie);
7895 7710 ANON_LOCK_EXIT(&->a_rwlock);
7896 7711 }
7897 7712
7898 7713 /*
7899 7714 * If the error is EDEADLK then we must bounce
7900 7715 * up and drop all vm subsystem locks and then
7901 7716 * retry the operation later
7902 7717 * This behavior is a temporary measure because
7903 7718 * ufs/sds logging is badly designed and will
7904 7719 * deadlock if we don't allow this bounce to
7905 7720 * happen. The real solution is to re-design
7906 7721 * the logging code to work properly. See bug
7907 7722 * 4125102 for details of the problem.
7908 7723 */
7909 7724 if (error == EDEADLK) {
7910 7725 err = error;
7911 7726 goto out;
7912 7727 }
7913 7728 /*
7914 7729 * Quit if we fail to fault in the page. Treat
7915 7730 * the failure as an error, unless the addr
7916 7731 * is mapped beyond the end of a file.
7917 7732 */
7918 7733 if (error && svd->vp) {
7919 7734 va.va_mask = AT_SIZE;
7920 7735 if (VOP_GETATTR(svd->vp, &va, 0,
7921 7736 svd->cred, NULL) != 0) {
7922 7737 err = EIO;
7923 7738 goto out;
7924 7739 }
7925 7740 if (btopr(va.va_size) >=
7926 7741 btopr(off + 1)) {
7927 7742 err = EIO;
7928 7743 goto out;
7929 7744 }
7930 7745 goto out;
7931 7746
7932 7747 } else if (error) {
7933 7748 err = EIO;
7934 7749 goto out;
7935 7750 }
7936 7751 pp = pl[0];
7937 7752 ASSERT(pp != NULL);
7938 7753 }
7939 7754
7940 7755 /*
7941 7756 * See Statement at the beginning of this routine.
7942 7757 *
7943 7758 * claim is always set if MAP_PRIVATE and PROT_WRITE
7944 7759 * irrespective of following factors:
7945 7760 *
7946 7761 * (1) anon slots are populated or not
7947 7762 * (2) cow is broken or not
7948 7763 * (3) refcnt on ap is 1 or greater than 1
7949 7764 *
7950 7765 * See 4140683 for details
7951 7766 */
7952 7767 claim = ((VPP_PROT(vpp) & PROT_WRITE) &&
7953 7768 (svd->type == MAP_PRIVATE));
7954 7769
7955 7770 /*
7956 7771 * Perform page-level operation appropriate to
7957 7772 * operation. If locking, undo the SOFTLOCK
7958 7773 * performed to bring the page into memory
7959 7774 * after setting the lock. If unlocking,
7960 7775 * and no page was found, account for the claim
7961 7776 * separately.
7962 7777 */
7963 7778 if (op == MC_LOCK) {
7964 7779 int ret = 1; /* Assume success */
7965 7780
7966 7781 ASSERT(!VPP_ISPPLOCK(vpp));
7967 7782
7968 7783 ret = page_pp_lock(pp, claim, 0);
7969 7784 if (ap != NULL) {
7970 7785 if (ap->an_pvp != NULL) {
7971 7786 anon_swap_free(ap, pp);
7972 7787 }
7973 7788 anon_array_exit(&cookie);
7974 7789 ANON_LOCK_EXIT(&->a_rwlock);
7975 7790 }
7976 7791 if (ret == 0) {
7977 7792 /* locking page failed */
7978 7793 page_unlock(pp);
7979 7794 err = EAGAIN;
7980 7795 goto out;
7981 7796 }
7982 7797 VPP_SETPPLOCK(vpp);
7983 7798 if (sp != NULL) {
7984 7799 if (pp->p_lckcnt == 1)
7985 7800 locked_bytes += PAGESIZE;
7986 7801 } else
7987 7802 locked_bytes += PAGESIZE;
7988 7803
7989 7804 if (lockmap != (ulong_t *)NULL)
7990 7805 BT_SET(lockmap, pos);
7991 7806
7992 7807 page_unlock(pp);
7993 7808 } else {
7994 7809 ASSERT(VPP_ISPPLOCK(vpp));
7995 7810 if (pp != NULL) {
7996 7811 /* sysV pages should be locked */
7997 7812 ASSERT(sp == NULL || pp->p_lckcnt > 0);
7998 7813 page_pp_unlock(pp, claim, 0);
7999 7814 if (sp != NULL) {
8000 7815 if (pp->p_lckcnt == 0)
8001 7816 unlocked_bytes
8002 7817 += PAGESIZE;
8003 7818 } else
8004 7819 unlocked_bytes += PAGESIZE;
8005 7820 page_unlock(pp);
8006 7821 } else {
8007 7822 ASSERT(sp == NULL);
8008 7823 unlocked_bytes += PAGESIZE;
8009 7824 }
8010 7825 VPP_CLRPPLOCK(vpp);
8011 7826 }
8012 7827 }
8013 7828 }
8014 7829 out:
8015 7830 if (op == MC_LOCK) {
8016 7831 /* Credit back bytes that did not get locked */
8017 7832 if ((unlocked_bytes - locked_bytes) > 0) {
8018 7833 if (proj == NULL)
8019 7834 mutex_enter(&p->p_lock);
8020 7835 rctl_decr_locked_mem(p, proj,
8021 7836 (unlocked_bytes - locked_bytes), chargeproc);
8022 7837 if (proj == NULL)
8023 7838 mutex_exit(&p->p_lock);
8024 7839 }
8025 7840
8026 7841 } else {
8027 7842 /* Account bytes that were unlocked */
8028 7843 if (unlocked_bytes > 0) {
8029 7844 if (proj == NULL)
8030 7845 mutex_enter(&p->p_lock);
8031 7846 rctl_decr_locked_mem(p, proj, unlocked_bytes,
8032 7847 chargeproc);
8033 7848 if (proj == NULL)
8034 7849 mutex_exit(&p->p_lock);
8035 7850 }
8036 7851 }
8037 7852 if (sp != NULL)
8038 7853 mutex_exit(&sp->shm_mlock);
8039 7854 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8040 7855
8041 7856 return (err);
8042 7857 }
8043 7858
8044 7859 /*
8045 7860 * Set advice from user for specified pages
8046 7861 * There are 9 types of advice:
8047 7862 * MADV_NORMAL - Normal (default) behavior (whatever that is)
8048 7863 * MADV_RANDOM - Random page references
8049 7864 * do not allow readahead or 'klustering'
8050 7865 * MADV_SEQUENTIAL - Sequential page references
8051 7866 * Pages previous to the one currently being
8052 7867 * accessed (determined by fault) are 'not needed'
8053 7868 * and are freed immediately
8054 7869 * MADV_WILLNEED - Pages are likely to be used (fault ahead in mctl)
8055 7870 * MADV_DONTNEED - Pages are not needed (synced out in mctl)
8056 7871 * MADV_FREE - Contents can be discarded
8057 7872 * MADV_ACCESS_DEFAULT- Default access
8058 7873 * MADV_ACCESS_LWP - Next LWP will access heavily
8059 7874 * MADV_ACCESS_MANY- Many LWPs or processes will access heavily
8060 7875 */
8061 7876 static int
8062 7877 segvn_advise(struct seg *seg, caddr_t addr, size_t len, uint_t behav)
8063 7878 {
8064 7879 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
8065 7880 size_t page;
8066 7881 int err = 0;
8067 7882 int already_set;
8068 7883 struct anon_map *amp;
8069 7884 ulong_t anon_index;
8070 7885 struct seg *next;
8071 7886 lgrp_mem_policy_t policy;
8072 7887 struct seg *prev;
8073 7888 struct vnode *vp;
8074 7889
8075 7890 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
8076 7891
8077 7892 /*
8078 7893 * In case of MADV_FREE, we won't be modifying any segment private
8079 7894 * data structures; so, we only need to grab READER's lock
8080 7895 */
8081 7896 if (behav != MADV_FREE) {
8082 7897 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_WRITER);
8083 7898 if (svd->tr_state != SEGVN_TR_OFF) {
8084 7899 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8085 7900 return (0);
8086 7901 }
8087 7902 } else {
8088 7903 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_READER);
8089 7904 }
8090 7905
8091 7906 /*
8092 7907 * Large pages are assumed to be only turned on when accesses to the
8093 7908 * segment's address range have spatial and temporal locality. That
8094 7909 * justifies ignoring MADV_SEQUENTIAL for large page segments.
8095 7910 * Also, ignore advice affecting lgroup memory allocation
8096 7911 * if don't need to do lgroup optimizations on this system
8097 7912 */
8098 7913
8099 7914 if ((behav == MADV_SEQUENTIAL &&
8100 7915 (seg->s_szc != 0 || HAT_IS_REGION_COOKIE_VALID(svd->rcookie))) ||
8101 7916 (!lgrp_optimizations() && (behav == MADV_ACCESS_DEFAULT ||
8102 7917 behav == MADV_ACCESS_LWP || behav == MADV_ACCESS_MANY))) {
8103 7918 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8104 7919 return (0);
8105 7920 }
8106 7921
8107 7922 if (behav == MADV_SEQUENTIAL || behav == MADV_ACCESS_DEFAULT ||
8108 7923 behav == MADV_ACCESS_LWP || behav == MADV_ACCESS_MANY) {
8109 7924 /*
8110 7925 * Since we are going to unload hat mappings
8111 7926 * we first have to flush the cache. Otherwise
8112 7927 * this might lead to system panic if another
8113 7928 * thread is doing physio on the range whose
8114 7929 * mappings are unloaded by madvise(3C).
8115 7930 */
8116 7931 if (svd->softlockcnt > 0) {
8117 7932 /*
8118 7933 * If this is shared segment non 0 softlockcnt
8119 7934 * means locked pages are still in use.
8120 7935 */
8121 7936 if (svd->type == MAP_SHARED) {
8122 7937 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8123 7938 return (EAGAIN);
8124 7939 }
8125 7940 /*
8126 7941 * Since we do have the segvn writers lock
8127 7942 * nobody can fill the cache with entries
8128 7943 * belonging to this seg during the purge.
8129 7944 * The flush either succeeds or we still
8130 7945 * have pending I/Os. In the later case,
8131 7946 * madvise(3C) fails.
8132 7947 */
8133 7948 segvn_purge(seg);
8134 7949 if (svd->softlockcnt > 0) {
8135 7950 /*
8136 7951 * Since madvise(3C) is advisory and
8137 7952 * it's not part of UNIX98, madvise(3C)
8138 7953 * failure here doesn't cause any hardship.
8139 7954 * Note that we don't block in "as" layer.
8140 7955 */
8141 7956 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8142 7957 return (EAGAIN);
8143 7958 }
8144 7959 } else if (svd->type == MAP_SHARED && svd->amp != NULL &&
8145 7960 svd->amp->a_softlockcnt > 0) {
8146 7961 /*
8147 7962 * Try to purge this amp's entries from pcache. It
8148 7963 * will succeed only if other segments that share the
8149 7964 * amp have no outstanding softlock's.
8150 7965 */
8151 7966 segvn_purge(seg);
8152 7967 }
8153 7968 }
8154 7969
8155 7970 amp = svd->amp;
8156 7971 vp = svd->vp;
8157 7972 if (behav == MADV_FREE) {
8158 7973 /*
8159 7974 * MADV_FREE is not supported for segments with
8160 7975 * underlying object; if anonmap is NULL, anon slots
8161 7976 * are not yet populated and there is nothing for
8162 7977 * us to do. As MADV_FREE is advisory, we don't
8163 7978 * return error in either case.
8164 7979 */
8165 7980 if (vp != NULL || amp == NULL) {
8166 7981 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8167 7982 return (0);
8168 7983 }
8169 7984
8170 7985 segvn_purge(seg);
8171 7986
8172 7987 page = seg_page(seg, addr);
8173 7988 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
8174 7989 anon_disclaim(amp, svd->anon_index + page, len);
8175 7990 ANON_LOCK_EXIT(&->a_rwlock);
8176 7991 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8177 7992 return (0);
8178 7993 }
8179 7994
8180 7995 /*
8181 7996 * If advice is to be applied to entire segment,
8182 7997 * use advice field in seg_data structure
8183 7998 * otherwise use appropriate vpage entry.
8184 7999 */
8185 8000 if ((addr == seg->s_base) && (len == seg->s_size)) {
8186 8001 switch (behav) {
8187 8002 case MADV_ACCESS_LWP:
8188 8003 case MADV_ACCESS_MANY:
8189 8004 case MADV_ACCESS_DEFAULT:
8190 8005 /*
8191 8006 * Set memory allocation policy for this segment
8192 8007 */
8193 8008 policy = lgrp_madv_to_policy(behav, len, svd->type);
8194 8009 if (svd->type == MAP_SHARED)
8195 8010 already_set = lgrp_shm_policy_set(policy, amp,
8196 8011 svd->anon_index, vp, svd->offset, len);
8197 8012 else {
8198 8013 /*
8199 8014 * For private memory, need writers lock on
8200 8015 * address space because the segment may be
8201 8016 * split or concatenated when changing policy
8202 8017 */
8203 8018 if (AS_READ_HELD(seg->s_as)) {
8204 8019 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8205 8020 return (IE_RETRY);
8206 8021 }
8207 8022
8208 8023 already_set = lgrp_privm_policy_set(policy,
8209 8024 &svd->policy_info, len);
8210 8025 }
8211 8026
8212 8027 /*
8213 8028 * If policy set already and it shouldn't be reapplied,
8214 8029 * don't do anything.
8215 8030 */
8216 8031 if (already_set &&
8217 8032 !LGRP_MEM_POLICY_REAPPLICABLE(policy))
8218 8033 break;
8219 8034
8220 8035 /*
8221 8036 * Mark any existing pages in given range for
8222 8037 * migration
8223 8038 */
8224 8039 page_mark_migrate(seg, addr, len, amp, svd->anon_index,
8225 8040 vp, svd->offset, 1);
8226 8041
8227 8042 /*
8228 8043 * If same policy set already or this is a shared
8229 8044 * memory segment, don't need to try to concatenate
8230 8045 * segment with adjacent ones.
8231 8046 */
8232 8047 if (already_set || svd->type == MAP_SHARED)
8233 8048 break;
8234 8049
8235 8050 /*
8236 8051 * Try to concatenate this segment with previous
8237 8052 * one and next one, since we changed policy for
8238 8053 * this one and it may be compatible with adjacent
8239 8054 * ones now.
8240 8055 */
8241 8056 prev = AS_SEGPREV(seg->s_as, seg);
8242 8057 next = AS_SEGNEXT(seg->s_as, seg);
8243 8058
8244 8059 if (next && next->s_ops == &segvn_ops &&
8245 8060 addr + len == next->s_base)
8246 8061 (void) segvn_concat(seg, next, 1);
8247 8062
8248 8063 if (prev && prev->s_ops == &segvn_ops &&
8249 8064 addr == prev->s_base + prev->s_size) {
8250 8065 /*
8251 8066 * Drop lock for private data of current
8252 8067 * segment before concatenating (deleting) it
8253 8068 * and return IE_REATTACH to tell as_ctl() that
8254 8069 * current segment has changed
8255 8070 */
8256 8071 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8257 8072 if (!segvn_concat(prev, seg, 1))
8258 8073 err = IE_REATTACH;
8259 8074
8260 8075 return (err);
8261 8076 }
8262 8077 break;
8263 8078
8264 8079 case MADV_SEQUENTIAL:
8265 8080 /*
8266 8081 * unloading mapping guarantees
8267 8082 * detection in segvn_fault
8268 8083 */
8269 8084 ASSERT(seg->s_szc == 0);
8270 8085 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
8271 8086 hat_unload(seg->s_as->a_hat, addr, len,
8272 8087 HAT_UNLOAD);
8273 8088 /* FALLTHROUGH */
8274 8089 case MADV_NORMAL:
8275 8090 case MADV_RANDOM:
8276 8091 svd->advice = (uchar_t)behav;
8277 8092 svd->pageadvice = 0;
8278 8093 break;
8279 8094 case MADV_WILLNEED: /* handled in memcntl */
8280 8095 case MADV_DONTNEED: /* handled in memcntl */
8281 8096 case MADV_FREE: /* handled above */
8282 8097 break;
8283 8098 default:
8284 8099 err = EINVAL;
8285 8100 }
8286 8101 } else {
8287 8102 caddr_t eaddr;
8288 8103 struct seg *new_seg;
8289 8104 struct segvn_data *new_svd;
8290 8105 u_offset_t off;
8291 8106 caddr_t oldeaddr;
8292 8107
8293 8108 page = seg_page(seg, addr);
8294 8109
8295 8110 segvn_vpage(seg);
8296 8111 if (svd->vpage == NULL) {
8297 8112 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8298 8113 return (ENOMEM);
8299 8114 }
8300 8115
8301 8116 switch (behav) {
8302 8117 struct vpage *bvpp, *evpp;
8303 8118
8304 8119 case MADV_ACCESS_LWP:
8305 8120 case MADV_ACCESS_MANY:
8306 8121 case MADV_ACCESS_DEFAULT:
8307 8122 /*
8308 8123 * Set memory allocation policy for portion of this
8309 8124 * segment
8310 8125 */
8311 8126
8312 8127 /*
8313 8128 * Align address and length of advice to page
8314 8129 * boundaries for large pages
8315 8130 */
8316 8131 if (seg->s_szc != 0) {
8317 8132 size_t pgsz;
8318 8133
8319 8134 pgsz = page_get_pagesize(seg->s_szc);
8320 8135 addr = (caddr_t)P2ALIGN((uintptr_t)addr, pgsz);
8321 8136 len = P2ROUNDUP(len, pgsz);
8322 8137 }
8323 8138
8324 8139 /*
8325 8140 * Check to see whether policy is set already
8326 8141 */
8327 8142 policy = lgrp_madv_to_policy(behav, len, svd->type);
8328 8143
8329 8144 anon_index = svd->anon_index + page;
8330 8145 off = svd->offset + (uintptr_t)(addr - seg->s_base);
8331 8146
8332 8147 if (svd->type == MAP_SHARED)
8333 8148 already_set = lgrp_shm_policy_set(policy, amp,
8334 8149 anon_index, vp, off, len);
8335 8150 else
8336 8151 already_set =
8337 8152 (policy == svd->policy_info.mem_policy);
8338 8153
8339 8154 /*
8340 8155 * If policy set already and it shouldn't be reapplied,
8341 8156 * don't do anything.
8342 8157 */
8343 8158 if (already_set &&
8344 8159 !LGRP_MEM_POLICY_REAPPLICABLE(policy))
8345 8160 break;
8346 8161
8347 8162 /*
8348 8163 * For private memory, need writers lock on
8349 8164 * address space because the segment may be
8350 8165 * split or concatenated when changing policy
8351 8166 */
8352 8167 if (svd->type == MAP_PRIVATE &&
8353 8168 AS_READ_HELD(seg->s_as)) {
8354 8169 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8355 8170 return (IE_RETRY);
8356 8171 }
8357 8172
8358 8173 /*
8359 8174 * Mark any existing pages in given range for
8360 8175 * migration
8361 8176 */
8362 8177 page_mark_migrate(seg, addr, len, amp, svd->anon_index,
8363 8178 vp, svd->offset, 1);
8364 8179
8365 8180 /*
8366 8181 * Don't need to try to split or concatenate
8367 8182 * segments, since policy is same or this is a shared
8368 8183 * memory segment
8369 8184 */
8370 8185 if (already_set || svd->type == MAP_SHARED)
8371 8186 break;
8372 8187
8373 8188 if (HAT_IS_REGION_COOKIE_VALID(svd->rcookie)) {
8374 8189 ASSERT(svd->amp == NULL);
8375 8190 ASSERT(svd->tr_state == SEGVN_TR_OFF);
8376 8191 ASSERT(svd->softlockcnt == 0);
8377 8192 hat_leave_region(seg->s_as->a_hat, svd->rcookie,
8378 8193 HAT_REGION_TEXT);
8379 8194 svd->rcookie = HAT_INVALID_REGION_COOKIE;
8380 8195 }
8381 8196
8382 8197 /*
8383 8198 * Split off new segment if advice only applies to a
8384 8199 * portion of existing segment starting in middle
8385 8200 */
8386 8201 new_seg = NULL;
8387 8202 eaddr = addr + len;
8388 8203 oldeaddr = seg->s_base + seg->s_size;
8389 8204 if (addr > seg->s_base) {
8390 8205 /*
8391 8206 * Must flush I/O page cache
8392 8207 * before splitting segment
8393 8208 */
8394 8209 if (svd->softlockcnt > 0)
8395 8210 segvn_purge(seg);
8396 8211
8397 8212 /*
8398 8213 * Split segment and return IE_REATTACH to tell
8399 8214 * as_ctl() that current segment changed
8400 8215 */
8401 8216 new_seg = segvn_split_seg(seg, addr);
8402 8217 new_svd = (struct segvn_data *)new_seg->s_data;
8403 8218 err = IE_REATTACH;
8404 8219
8405 8220 /*
8406 8221 * If new segment ends where old one
8407 8222 * did, try to concatenate the new
8408 8223 * segment with next one.
8409 8224 */
8410 8225 if (eaddr == oldeaddr) {
8411 8226 /*
8412 8227 * Set policy for new segment
8413 8228 */
8414 8229 (void) lgrp_privm_policy_set(policy,
8415 8230 &new_svd->policy_info,
8416 8231 new_seg->s_size);
8417 8232
8418 8233 next = AS_SEGNEXT(new_seg->s_as,
8419 8234 new_seg);
8420 8235
8421 8236 if (next &&
8422 8237 next->s_ops == &segvn_ops &&
8423 8238 eaddr == next->s_base)
8424 8239 (void) segvn_concat(new_seg,
8425 8240 next, 1);
8426 8241 }
8427 8242 }
8428 8243
8429 8244 /*
8430 8245 * Split off end of existing segment if advice only
8431 8246 * applies to a portion of segment ending before
8432 8247 * end of the existing segment
8433 8248 */
8434 8249 if (eaddr < oldeaddr) {
8435 8250 /*
8436 8251 * Must flush I/O page cache
8437 8252 * before splitting segment
8438 8253 */
8439 8254 if (svd->softlockcnt > 0)
8440 8255 segvn_purge(seg);
8441 8256
8442 8257 /*
8443 8258 * If beginning of old segment was already
8444 8259 * split off, use new segment to split end off
8445 8260 * from.
8446 8261 */
8447 8262 if (new_seg != NULL && new_seg != seg) {
8448 8263 /*
8449 8264 * Split segment
8450 8265 */
8451 8266 (void) segvn_split_seg(new_seg, eaddr);
8452 8267
8453 8268 /*
8454 8269 * Set policy for new segment
8455 8270 */
8456 8271 (void) lgrp_privm_policy_set(policy,
8457 8272 &new_svd->policy_info,
8458 8273 new_seg->s_size);
8459 8274 } else {
8460 8275 /*
8461 8276 * Split segment and return IE_REATTACH
8462 8277 * to tell as_ctl() that current
8463 8278 * segment changed
8464 8279 */
8465 8280 (void) segvn_split_seg(seg, eaddr);
8466 8281 err = IE_REATTACH;
8467 8282
8468 8283 (void) lgrp_privm_policy_set(policy,
8469 8284 &svd->policy_info, seg->s_size);
8470 8285
8471 8286 /*
8472 8287 * If new segment starts where old one
8473 8288 * did, try to concatenate it with
8474 8289 * previous segment.
8475 8290 */
8476 8291 if (addr == seg->s_base) {
8477 8292 prev = AS_SEGPREV(seg->s_as,
8478 8293 seg);
8479 8294
8480 8295 /*
8481 8296 * Drop lock for private data
8482 8297 * of current segment before
8483 8298 * concatenating (deleting) it
8484 8299 */
8485 8300 if (prev &&
8486 8301 prev->s_ops ==
8487 8302 &segvn_ops &&
8488 8303 addr == prev->s_base +
8489 8304 prev->s_size) {
8490 8305 SEGVN_LOCK_EXIT(
8491 8306 seg->s_as,
8492 8307 &svd->lock);
8493 8308 (void) segvn_concat(
8494 8309 prev, seg, 1);
8495 8310 return (err);
8496 8311 }
8497 8312 }
8498 8313 }
8499 8314 }
8500 8315 break;
8501 8316 case MADV_SEQUENTIAL:
8502 8317 ASSERT(seg->s_szc == 0);
8503 8318 ASSERT(svd->rcookie == HAT_INVALID_REGION_COOKIE);
8504 8319 hat_unload(seg->s_as->a_hat, addr, len, HAT_UNLOAD);
8505 8320 /* FALLTHROUGH */
8506 8321 case MADV_NORMAL:
8507 8322 case MADV_RANDOM:
8508 8323 bvpp = &svd->vpage[page];
8509 8324 evpp = &svd->vpage[page + (len >> PAGESHIFT)];
8510 8325 for (; bvpp < evpp; bvpp++)
8511 8326 VPP_SETADVICE(bvpp, behav);
8512 8327 svd->advice = MADV_NORMAL;
8513 8328 break;
8514 8329 case MADV_WILLNEED: /* handled in memcntl */
8515 8330 case MADV_DONTNEED: /* handled in memcntl */
8516 8331 case MADV_FREE: /* handled above */
8517 8332 break;
8518 8333 default:
8519 8334 err = EINVAL;
8520 8335 }
8521 8336 }
8522 8337 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8523 8338 return (err);
8524 8339 }
8525 8340
8526 8341 /*
8527 8342 * There is one kind of inheritance that can be specified for pages:
8528 8343 *
8529 8344 * SEGP_INH_ZERO - Pages should be zeroed in the child
8530 8345 */
8531 8346 static int
8532 8347 segvn_inherit(struct seg *seg, caddr_t addr, size_t len, uint_t behav)
8533 8348 {
8534 8349 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
8535 8350 struct vpage *bvpp, *evpp;
8536 8351 size_t page;
8537 8352 int ret = 0;
8538 8353
8539 8354 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
8540 8355
8541 8356 /* Can't support something we don't know about */
8542 8357 if (behav != SEGP_INH_ZERO)
8543 8358 return (ENOTSUP);
8544 8359
8545 8360 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_WRITER);
8546 8361
8547 8362 /*
8548 8363 * This must be a straightforward anonymous segment that is mapped
8549 8364 * privately and is not backed by a vnode.
8550 8365 */
8551 8366 if (svd->tr_state != SEGVN_TR_OFF ||
8552 8367 svd->type != MAP_PRIVATE ||
8553 8368 svd->vp != NULL) {
8554 8369 ret = EINVAL;
8555 8370 goto out;
8556 8371 }
8557 8372
8558 8373 /*
8559 8374 * If the entire segment has been marked as inherit zero, then no reason
8560 8375 * to do anything else.
8561 8376 */
8562 8377 if (svd->svn_inz == SEGVN_INZ_ALL) {
8563 8378 ret = 0;
8564 8379 goto out;
8565 8380 }
8566 8381
8567 8382 /*
8568 8383 * If this applies to the entire segment, simply mark it and we're done.
8569 8384 */
8570 8385 if ((addr == seg->s_base) && (len == seg->s_size)) {
8571 8386 svd->svn_inz = SEGVN_INZ_ALL;
8572 8387 ret = 0;
8573 8388 goto out;
8574 8389 }
8575 8390
8576 8391 /*
8577 8392 * We've been asked to mark a subset of this segment as inherit zero,
8578 8393 * therefore we need to mainpulate its vpages.
8579 8394 */
8580 8395 if (svd->vpage == NULL) {
8581 8396 segvn_vpage(seg);
8582 8397 if (svd->vpage == NULL) {
8583 8398 ret = ENOMEM;
8584 8399 goto out;
8585 8400 }
8586 8401 }
8587 8402
8588 8403 svd->svn_inz = SEGVN_INZ_VPP;
8589 8404 page = seg_page(seg, addr);
8590 8405 bvpp = &svd->vpage[page];
8591 8406 evpp = &svd->vpage[page + (len >> PAGESHIFT)];
8592 8407 for (; bvpp < evpp; bvpp++)
8593 8408 VPP_SETINHZERO(bvpp);
8594 8409 ret = 0;
8595 8410
8596 8411 out:
8597 8412 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
8598 8413 return (ret);
8599 8414 }
8600 8415
8601 8416 /*
8602 8417 * Create a vpage structure for this seg.
8603 8418 */
8604 8419 static void
8605 8420 segvn_vpage(struct seg *seg)
8606 8421 {
8607 8422 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
8608 8423 struct vpage *vp, *evp;
8609 8424 static pgcnt_t page_limit = 0;
8610 8425
8611 8426 ASSERT(SEGVN_WRITE_HELD(seg->s_as, &svd->lock));
8612 8427
8613 8428 /*
8614 8429 * If no vpage structure exists, allocate one. Copy the protections
8615 8430 * and the advice from the segment itself to the individual pages.
8616 8431 */
8617 8432 if (svd->vpage == NULL) {
8618 8433 /*
8619 8434 * Start by calculating the number of pages we must allocate to
8620 8435 * track the per-page vpage structs needs for this entire
8621 8436 * segment. If we know now that it will require more than our
8622 8437 * heuristic for the maximum amount of kmem we can consume then
8623 8438 * fail. We do this here, instead of trying to detect this deep
8624 8439 * in page_resv and propagating the error up, since the entire
8625 8440 * memory allocation stack is not amenable to passing this
8626 8441 * back. Instead, it wants to keep trying.
8627 8442 *
8628 8443 * As a heuristic we set a page limit of 5/8s of total_pages
8629 8444 * for this allocation. We use shifts so that no floating
8630 8445 * point conversion takes place and only need to do the
8631 8446 * calculation once.
8632 8447 */
8633 8448 ulong_t mem_needed = seg_pages(seg) * sizeof (struct vpage);
8634 8449 pgcnt_t npages = mem_needed >> PAGESHIFT;
8635 8450
8636 8451 if (page_limit == 0)
8637 8452 page_limit = (total_pages >> 1) + (total_pages >> 3);
8638 8453
8639 8454 if (npages > page_limit)
8640 8455 return;
8641 8456
8642 8457 svd->pageadvice = 1;
8643 8458 svd->vpage = kmem_zalloc(mem_needed, KM_SLEEP);
8644 8459 evp = &svd->vpage[seg_page(seg, seg->s_base + seg->s_size)];
8645 8460 for (vp = svd->vpage; vp < evp; vp++) {
8646 8461 VPP_SETPROT(vp, svd->prot);
8647 8462 VPP_SETADVICE(vp, svd->advice);
8648 8463 }
8649 8464 }
8650 8465 }
8651 8466
8652 8467 /*
8653 8468 * Dump the pages belonging to this segvn segment.
8654 8469 */
8655 8470 static void
8656 8471 segvn_dump(struct seg *seg)
8657 8472 {
8658 8473 struct segvn_data *svd;
8659 8474 page_t *pp;
8660 8475 struct anon_map *amp;
8661 8476 ulong_t anon_index;
8662 8477 struct vnode *vp;
8663 8478 u_offset_t off, offset;
8664 8479 pfn_t pfn;
8665 8480 pgcnt_t page, npages;
8666 8481 caddr_t addr;
8667 8482
8668 8483 npages = seg_pages(seg);
8669 8484 svd = (struct segvn_data *)seg->s_data;
8670 8485 vp = svd->vp;
8671 8486 off = offset = svd->offset;
8672 8487 addr = seg->s_base;
8673 8488
8674 8489 if ((amp = svd->amp) != NULL) {
8675 8490 anon_index = svd->anon_index;
8676 8491 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
8677 8492 }
8678 8493
8679 8494 for (page = 0; page < npages; page++, offset += PAGESIZE) {
8680 8495 struct anon *ap;
8681 8496 int we_own_it = 0;
8682 8497
8683 8498 if (amp && (ap = anon_get_ptr(svd->amp->ahp, anon_index++))) {
8684 8499 swap_xlate_nopanic(ap, &vp, &off);
8685 8500 } else {
8686 8501 vp = svd->vp;
8687 8502 off = offset;
8688 8503 }
8689 8504
8690 8505 /*
8691 8506 * If pp == NULL, the page either does not exist
8692 8507 * or is exclusively locked. So determine if it
8693 8508 * exists before searching for it.
8694 8509 */
8695 8510
8696 8511 if ((pp = page_lookup_nowait(vp, off, SE_SHARED)))
8697 8512 we_own_it = 1;
8698 8513 else
8699 8514 pp = page_exists(vp, off);
8700 8515
8701 8516 if (pp) {
8702 8517 pfn = page_pptonum(pp);
8703 8518 dump_addpage(seg->s_as, addr, pfn);
8704 8519 if (we_own_it)
8705 8520 page_unlock(pp);
8706 8521 }
8707 8522 addr += PAGESIZE;
8708 8523 dump_timeleft = dump_timeout;
8709 8524 }
8710 8525
8711 8526 if (amp != NULL)
8712 8527 ANON_LOCK_EXIT(&->a_rwlock);
8713 8528 }
8714 8529
8715 8530 #ifdef DEBUG
8716 8531 static uint32_t segvn_pglock_mtbf = 0;
8717 8532 #endif
8718 8533
8719 8534 #define PCACHE_SHWLIST ((page_t *)-2)
8720 8535 #define NOPCACHE_SHWLIST ((page_t *)-1)
8721 8536
8722 8537 /*
8723 8538 * Lock/Unlock anon pages over a given range. Return shadow list. This routine
8724 8539 * uses global segment pcache to cache shadow lists (i.e. pp arrays) of pages
8725 8540 * to avoid the overhead of per page locking, unlocking for subsequent IOs to
8726 8541 * the same parts of the segment. Currently shadow list creation is only
8727 8542 * supported for pure anon segments. MAP_PRIVATE segment pcache entries are
8728 8543 * tagged with segment pointer, starting virtual address and length. This
8729 8544 * approach for MAP_SHARED segments may add many pcache entries for the same
8730 8545 * set of pages and lead to long hash chains that decrease pcache lookup
8731 8546 * performance. To avoid this issue for shared segments shared anon map and
8732 8547 * starting anon index are used for pcache entry tagging. This allows all
8733 8548 * segments to share pcache entries for the same anon range and reduces pcache
8734 8549 * chain's length as well as memory overhead from duplicate shadow lists and
8735 8550 * pcache entries.
8736 8551 *
8737 8552 * softlockcnt field in segvn_data structure counts the number of F_SOFTLOCK'd
8738 8553 * pages via segvn_fault() and pagelock'd pages via this routine. But pagelock
8739 8554 * part of softlockcnt accounting is done differently for private and shared
8740 8555 * segments. In private segment case softlock is only incremented when a new
8741 8556 * shadow list is created but not when an existing one is found via
8742 8557 * seg_plookup(). pcache entries have reference count incremented/decremented
8743 8558 * by each seg_plookup()/seg_pinactive() operation. Only entries that have 0
8744 8559 * reference count can be purged (and purging is needed before segment can be
8745 8560 * freed). When a private segment pcache entry is purged segvn_reclaim() will
8746 8561 * decrement softlockcnt. Since in private segment case each of its pcache
8747 8562 * entries only belongs to this segment we can expect that when
8748 8563 * segvn_pagelock(L_PAGEUNLOCK) was called for all outstanding IOs in this
8749 8564 * segment purge will succeed and softlockcnt will drop to 0. In shared
8750 8565 * segment case reference count in pcache entry counts active locks from many
8751 8566 * different segments so we can't expect segment purging to succeed even when
8752 8567 * segvn_pagelock(L_PAGEUNLOCK) was called for all outstanding IOs in this
8753 8568 * segment. To be able to determine when there're no pending pagelocks in
8754 8569 * shared segment case we don't rely on purging to make softlockcnt drop to 0
8755 8570 * but instead softlockcnt is incremented and decremented for every
8756 8571 * segvn_pagelock(L_PAGELOCK/L_PAGEUNLOCK) call regardless if a new shadow
8757 8572 * list was created or an existing one was found. When softlockcnt drops to 0
8758 8573 * this segment no longer has any claims for pcached shadow lists and the
8759 8574 * segment can be freed even if there're still active pcache entries
8760 8575 * shared by this segment anon map. Shared segment pcache entries belong to
8761 8576 * anon map and are typically removed when anon map is freed after all
8762 8577 * processes destroy the segments that use this anon map.
8763 8578 */
8764 8579 static int
8765 8580 segvn_pagelock(struct seg *seg, caddr_t addr, size_t len, struct page ***ppp,
8766 8581 enum lock_type type, enum seg_rw rw)
8767 8582 {
8768 8583 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
8769 8584 size_t np;
8770 8585 pgcnt_t adjustpages;
8771 8586 pgcnt_t npages;
8772 8587 ulong_t anon_index;
8773 8588 uint_t protchk = (rw == S_READ) ? PROT_READ : PROT_WRITE;
8774 8589 uint_t error;
8775 8590 struct anon_map *amp;
8776 8591 pgcnt_t anpgcnt;
8777 8592 struct page **pplist, **pl, *pp;
8778 8593 caddr_t a;
8779 8594 size_t page;
8780 8595 caddr_t lpgaddr, lpgeaddr;
8781 8596 anon_sync_obj_t cookie;
8782 8597 int anlock;
8783 8598 struct anon_map *pamp;
8784 8599 caddr_t paddr;
8785 8600 seg_preclaim_cbfunc_t preclaim_callback;
8786 8601 size_t pgsz;
8787 8602 int use_pcache;
8788 8603 size_t wlen;
8789 8604 uint_t pflags = 0;
8790 8605 int sftlck_sbase = 0;
8791 8606 int sftlck_send = 0;
8792 8607
8793 8608 #ifdef DEBUG
8794 8609 if (type == L_PAGELOCK && segvn_pglock_mtbf) {
8795 8610 hrtime_t ts = gethrtime();
8796 8611 if ((ts % segvn_pglock_mtbf) == 0) {
8797 8612 return (ENOTSUP);
8798 8613 }
8799 8614 if ((ts % segvn_pglock_mtbf) == 1) {
8800 8615 return (EFAULT);
8801 8616 }
8802 8617 }
8803 8618 #endif
8804 8619
8805 8620 TRACE_2(TR_FAC_PHYSIO, TR_PHYSIO_SEGVN_START,
8806 8621 "segvn_pagelock: start seg %p addr %p", seg, addr);
8807 8622
8808 8623 ASSERT(seg->s_as && AS_LOCK_HELD(seg->s_as));
8809 8624 ASSERT(type == L_PAGELOCK || type == L_PAGEUNLOCK);
8810 8625
8811 8626 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_READER);
8812 8627
8813 8628 /*
8814 8629 * for now we only support pagelock to anon memory. We would have to
8815 8630 * check protections for vnode objects and call into the vnode driver.
8816 8631 * That's too much for a fast path. Let the fault entry point handle
8817 8632 * it.
8818 8633 */
8819 8634 if (svd->vp != NULL) {
8820 8635 if (type == L_PAGELOCK) {
8821 8636 error = ENOTSUP;
8822 8637 goto out;
8823 8638 }
8824 8639 panic("segvn_pagelock(L_PAGEUNLOCK): vp != NULL");
8825 8640 }
8826 8641 if ((amp = svd->amp) == NULL) {
8827 8642 if (type == L_PAGELOCK) {
8828 8643 error = EFAULT;
8829 8644 goto out;
8830 8645 }
8831 8646 panic("segvn_pagelock(L_PAGEUNLOCK): amp == NULL");
8832 8647 }
8833 8648 if (rw != S_READ && rw != S_WRITE) {
8834 8649 if (type == L_PAGELOCK) {
8835 8650 error = ENOTSUP;
8836 8651 goto out;
8837 8652 }
8838 8653 panic("segvn_pagelock(L_PAGEUNLOCK): bad rw");
8839 8654 }
8840 8655
8841 8656 if (seg->s_szc != 0) {
8842 8657 /*
8843 8658 * We are adjusting the pagelock region to the large page size
8844 8659 * boundary because the unlocked part of a large page cannot
8845 8660 * be freed anyway unless all constituent pages of a large
8846 8661 * page are locked. Bigger regions reduce pcache chain length
8847 8662 * and improve lookup performance. The tradeoff is that the
8848 8663 * very first segvn_pagelock() call for a given page is more
8849 8664 * expensive if only 1 page_t is needed for IO. This is only
8850 8665 * an issue if pcache entry doesn't get reused by several
8851 8666 * subsequent calls. We optimize here for the case when pcache
8852 8667 * is heavily used by repeated IOs to the same address range.
8853 8668 *
8854 8669 * Note segment's page size cannot change while we are holding
8855 8670 * as lock. And then it cannot change while softlockcnt is
8856 8671 * not 0. This will allow us to correctly recalculate large
8857 8672 * page size region for the matching pageunlock/reclaim call
8858 8673 * since as_pageunlock() caller must always match
8859 8674 * as_pagelock() call's addr and len.
8860 8675 *
8861 8676 * For pageunlock *ppp points to the pointer of page_t that
8862 8677 * corresponds to the real unadjusted start address. Similar
8863 8678 * for pagelock *ppp must point to the pointer of page_t that
8864 8679 * corresponds to the real unadjusted start address.
8865 8680 */
8866 8681 pgsz = page_get_pagesize(seg->s_szc);
8867 8682 CALC_LPG_REGION(pgsz, seg, addr, len, lpgaddr, lpgeaddr);
8868 8683 adjustpages = btop((uintptr_t)(addr - lpgaddr));
8869 8684 } else if (len < segvn_pglock_comb_thrshld) {
8870 8685 lpgaddr = addr;
8871 8686 lpgeaddr = addr + len;
8872 8687 adjustpages = 0;
8873 8688 pgsz = PAGESIZE;
8874 8689 } else {
8875 8690 /*
8876 8691 * Align the address range of large enough requests to allow
8877 8692 * combining of different shadow lists into 1 to reduce memory
8878 8693 * overhead from potentially overlapping large shadow lists
8879 8694 * (worst case is we have a 1MB IO into buffers with start
8880 8695 * addresses separated by 4K). Alignment is only possible if
8881 8696 * padded chunks have sufficient access permissions. Note
8882 8697 * permissions won't change between L_PAGELOCK and
8883 8698 * L_PAGEUNLOCK calls since non 0 softlockcnt will force
8884 8699 * segvn_setprot() to wait until softlockcnt drops to 0. This
8885 8700 * allows us to determine in L_PAGEUNLOCK the same range we
8886 8701 * computed in L_PAGELOCK.
8887 8702 *
8888 8703 * If alignment is limited by segment ends set
8889 8704 * sftlck_sbase/sftlck_send flags. In L_PAGELOCK case when
8890 8705 * these flags are set bump softlockcnt_sbase/softlockcnt_send
8891 8706 * per segment counters. In L_PAGEUNLOCK case decrease
8892 8707 * softlockcnt_sbase/softlockcnt_send counters if
8893 8708 * sftlck_sbase/sftlck_send flags are set. When
8894 8709 * softlockcnt_sbase/softlockcnt_send are non 0
8895 8710 * segvn_concat()/segvn_extend_prev()/segvn_extend_next()
8896 8711 * won't merge the segments. This restriction combined with
8897 8712 * restriction on segment unmapping and splitting for segments
8898 8713 * that have non 0 softlockcnt allows L_PAGEUNLOCK to
8899 8714 * correctly determine the same range that was previously
8900 8715 * locked by matching L_PAGELOCK.
8901 8716 */
8902 8717 pflags = SEGP_PSHIFT | (segvn_pglock_comb_bshift << 16);
8903 8718 pgsz = PAGESIZE;
8904 8719 if (svd->type == MAP_PRIVATE) {
8905 8720 lpgaddr = (caddr_t)P2ALIGN((uintptr_t)addr,
8906 8721 segvn_pglock_comb_balign);
8907 8722 if (lpgaddr < seg->s_base) {
8908 8723 lpgaddr = seg->s_base;
8909 8724 sftlck_sbase = 1;
8910 8725 }
8911 8726 } else {
8912 8727 ulong_t aix = svd->anon_index + seg_page(seg, addr);
8913 8728 ulong_t aaix = P2ALIGN(aix, segvn_pglock_comb_palign);
8914 8729 if (aaix < svd->anon_index) {
8915 8730 lpgaddr = seg->s_base;
8916 8731 sftlck_sbase = 1;
8917 8732 } else {
8918 8733 lpgaddr = addr - ptob(aix - aaix);
8919 8734 ASSERT(lpgaddr >= seg->s_base);
8920 8735 }
8921 8736 }
8922 8737 if (svd->pageprot && lpgaddr != addr) {
8923 8738 struct vpage *vp = &svd->vpage[seg_page(seg, lpgaddr)];
8924 8739 struct vpage *evp = &svd->vpage[seg_page(seg, addr)];
8925 8740 while (vp < evp) {
8926 8741 if ((VPP_PROT(vp) & protchk) == 0) {
8927 8742 break;
8928 8743 }
8929 8744 vp++;
8930 8745 }
8931 8746 if (vp < evp) {
8932 8747 lpgaddr = addr;
8933 8748 pflags = 0;
8934 8749 }
8935 8750 }
8936 8751 lpgeaddr = addr + len;
8937 8752 if (pflags) {
8938 8753 if (svd->type == MAP_PRIVATE) {
8939 8754 lpgeaddr = (caddr_t)P2ROUNDUP(
8940 8755 (uintptr_t)lpgeaddr,
8941 8756 segvn_pglock_comb_balign);
8942 8757 } else {
8943 8758 ulong_t aix = svd->anon_index +
8944 8759 seg_page(seg, lpgeaddr);
8945 8760 ulong_t aaix = P2ROUNDUP(aix,
8946 8761 segvn_pglock_comb_palign);
8947 8762 if (aaix < aix) {
8948 8763 lpgeaddr = 0;
8949 8764 } else {
8950 8765 lpgeaddr += ptob(aaix - aix);
8951 8766 }
8952 8767 }
8953 8768 if (lpgeaddr == 0 ||
8954 8769 lpgeaddr > seg->s_base + seg->s_size) {
8955 8770 lpgeaddr = seg->s_base + seg->s_size;
8956 8771 sftlck_send = 1;
8957 8772 }
8958 8773 }
8959 8774 if (svd->pageprot && lpgeaddr != addr + len) {
8960 8775 struct vpage *vp;
8961 8776 struct vpage *evp;
8962 8777
8963 8778 vp = &svd->vpage[seg_page(seg, addr + len)];
8964 8779 evp = &svd->vpage[seg_page(seg, lpgeaddr)];
8965 8780
8966 8781 while (vp < evp) {
8967 8782 if ((VPP_PROT(vp) & protchk) == 0) {
8968 8783 break;
8969 8784 }
8970 8785 vp++;
8971 8786 }
8972 8787 if (vp < evp) {
8973 8788 lpgeaddr = addr + len;
8974 8789 }
8975 8790 }
8976 8791 adjustpages = btop((uintptr_t)(addr - lpgaddr));
8977 8792 }
8978 8793
8979 8794 /*
8980 8795 * For MAP_SHARED segments we create pcache entries tagged by amp and
8981 8796 * anon index so that we can share pcache entries with other segments
8982 8797 * that map this amp. For private segments pcache entries are tagged
8983 8798 * with segment and virtual address.
8984 8799 */
8985 8800 if (svd->type == MAP_SHARED) {
8986 8801 pamp = amp;
8987 8802 paddr = (caddr_t)((lpgaddr - seg->s_base) +
8988 8803 ptob(svd->anon_index));
8989 8804 preclaim_callback = shamp_reclaim;
8990 8805 } else {
8991 8806 pamp = NULL;
8992 8807 paddr = lpgaddr;
8993 8808 preclaim_callback = segvn_reclaim;
8994 8809 }
8995 8810
8996 8811 if (type == L_PAGEUNLOCK) {
8997 8812 VM_STAT_ADD(segvnvmstats.pagelock[0]);
8998 8813
8999 8814 /*
9000 8815 * update hat ref bits for /proc. We need to make sure
9001 8816 * that threads tracing the ref and mod bits of the
9002 8817 * address space get the right data.
9003 8818 * Note: page ref and mod bits are updated at reclaim time
9004 8819 */
9005 8820 if (seg->s_as->a_vbits) {
9006 8821 for (a = addr; a < addr + len; a += PAGESIZE) {
9007 8822 if (rw == S_WRITE) {
9008 8823 hat_setstat(seg->s_as, a,
9009 8824 PAGESIZE, P_REF | P_MOD);
9010 8825 } else {
9011 8826 hat_setstat(seg->s_as, a,
9012 8827 PAGESIZE, P_REF);
9013 8828 }
9014 8829 }
9015 8830 }
9016 8831
9017 8832 /*
9018 8833 * Check the shadow list entry after the last page used in
9019 8834 * this IO request. If it's NOPCACHE_SHWLIST the shadow list
9020 8835 * was not inserted into pcache and is not large page
9021 8836 * adjusted. In this case call reclaim callback directly and
9022 8837 * don't adjust the shadow list start and size for large
9023 8838 * pages.
9024 8839 */
9025 8840 npages = btop(len);
9026 8841 if ((*ppp)[npages] == NOPCACHE_SHWLIST) {
9027 8842 void *ptag;
9028 8843 if (pamp != NULL) {
9029 8844 ASSERT(svd->type == MAP_SHARED);
9030 8845 ptag = (void *)pamp;
9031 8846 paddr = (caddr_t)((addr - seg->s_base) +
9032 8847 ptob(svd->anon_index));
9033 8848 } else {
9034 8849 ptag = (void *)seg;
9035 8850 paddr = addr;
9036 8851 }
9037 8852 (*preclaim_callback)(ptag, paddr, len, *ppp, rw, 0);
9038 8853 } else {
9039 8854 ASSERT((*ppp)[npages] == PCACHE_SHWLIST ||
9040 8855 IS_SWAPFSVP((*ppp)[npages]->p_vnode));
9041 8856 len = lpgeaddr - lpgaddr;
9042 8857 npages = btop(len);
9043 8858 seg_pinactive(seg, pamp, paddr, len,
9044 8859 *ppp - adjustpages, rw, pflags, preclaim_callback);
9045 8860 }
9046 8861
9047 8862 if (pamp != NULL) {
9048 8863 ASSERT(svd->type == MAP_SHARED);
9049 8864 ASSERT(svd->softlockcnt >= npages);
9050 8865 atomic_add_long((ulong_t *)&svd->softlockcnt, -npages);
9051 8866 }
9052 8867
9053 8868 if (sftlck_sbase) {
9054 8869 ASSERT(svd->softlockcnt_sbase > 0);
9055 8870 atomic_dec_ulong((ulong_t *)&svd->softlockcnt_sbase);
9056 8871 }
9057 8872 if (sftlck_send) {
9058 8873 ASSERT(svd->softlockcnt_send > 0);
9059 8874 atomic_dec_ulong((ulong_t *)&svd->softlockcnt_send);
9060 8875 }
9061 8876
9062 8877 /*
9063 8878 * If someone is blocked while unmapping, we purge
9064 8879 * segment page cache and thus reclaim pplist synchronously
9065 8880 * without waiting for seg_pasync_thread. This speeds up
9066 8881 * unmapping in cases where munmap(2) is called, while
9067 8882 * raw async i/o is still in progress or where a thread
9068 8883 * exits on data fault in a multithreaded application.
9069 8884 */
9070 8885 if (AS_ISUNMAPWAIT(seg->s_as)) {
9071 8886 if (svd->softlockcnt == 0) {
9072 8887 mutex_enter(&seg->s_as->a_contents);
9073 8888 if (AS_ISUNMAPWAIT(seg->s_as)) {
9074 8889 AS_CLRUNMAPWAIT(seg->s_as);
9075 8890 cv_broadcast(&seg->s_as->a_cv);
9076 8891 }
9077 8892 mutex_exit(&seg->s_as->a_contents);
9078 8893 } else if (pamp == NULL) {
9079 8894 /*
9080 8895 * softlockcnt is not 0 and this is a
9081 8896 * MAP_PRIVATE segment. Try to purge its
9082 8897 * pcache entries to reduce softlockcnt.
9083 8898 * If it drops to 0 segvn_reclaim()
9084 8899 * will wake up a thread waiting on
9085 8900 * unmapwait flag.
9086 8901 *
9087 8902 * We don't purge MAP_SHARED segments with non
9088 8903 * 0 softlockcnt since IO is still in progress
9089 8904 * for such segments.
9090 8905 */
9091 8906 ASSERT(svd->type == MAP_PRIVATE);
9092 8907 segvn_purge(seg);
9093 8908 }
9094 8909 }
9095 8910 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
9096 8911 TRACE_2(TR_FAC_PHYSIO, TR_PHYSIO_SEGVN_UNLOCK_END,
9097 8912 "segvn_pagelock: unlock seg %p addr %p", seg, addr);
9098 8913 return (0);
9099 8914 }
9100 8915
9101 8916 /* The L_PAGELOCK case ... */
9102 8917
9103 8918 VM_STAT_ADD(segvnvmstats.pagelock[1]);
9104 8919
9105 8920 /*
9106 8921 * For MAP_SHARED segments we have to check protections before
9107 8922 * seg_plookup() since pcache entries may be shared by many segments
9108 8923 * with potentially different page protections.
9109 8924 */
9110 8925 if (pamp != NULL) {
9111 8926 ASSERT(svd->type == MAP_SHARED);
9112 8927 if (svd->pageprot == 0) {
9113 8928 if ((svd->prot & protchk) == 0) {
9114 8929 error = EACCES;
9115 8930 goto out;
9116 8931 }
9117 8932 } else {
9118 8933 /*
9119 8934 * check page protections
9120 8935 */
9121 8936 caddr_t ea;
9122 8937
9123 8938 if (seg->s_szc) {
9124 8939 a = lpgaddr;
9125 8940 ea = lpgeaddr;
9126 8941 } else {
9127 8942 a = addr;
9128 8943 ea = addr + len;
9129 8944 }
9130 8945 for (; a < ea; a += pgsz) {
9131 8946 struct vpage *vp;
9132 8947
9133 8948 ASSERT(seg->s_szc == 0 ||
9134 8949 sameprot(seg, a, pgsz));
9135 8950 vp = &svd->vpage[seg_page(seg, a)];
9136 8951 if ((VPP_PROT(vp) & protchk) == 0) {
9137 8952 error = EACCES;
9138 8953 goto out;
9139 8954 }
9140 8955 }
9141 8956 }
9142 8957 }
9143 8958
9144 8959 /*
9145 8960 * try to find pages in segment page cache
9146 8961 */
9147 8962 pplist = seg_plookup(seg, pamp, paddr, lpgeaddr - lpgaddr, rw, pflags);
9148 8963 if (pplist != NULL) {
9149 8964 if (pamp != NULL) {
9150 8965 npages = btop((uintptr_t)(lpgeaddr - lpgaddr));
9151 8966 ASSERT(svd->type == MAP_SHARED);
9152 8967 atomic_add_long((ulong_t *)&svd->softlockcnt,
9153 8968 npages);
9154 8969 }
9155 8970 if (sftlck_sbase) {
9156 8971 atomic_inc_ulong((ulong_t *)&svd->softlockcnt_sbase);
9157 8972 }
9158 8973 if (sftlck_send) {
9159 8974 atomic_inc_ulong((ulong_t *)&svd->softlockcnt_send);
9160 8975 }
9161 8976 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
9162 8977 *ppp = pplist + adjustpages;
9163 8978 TRACE_2(TR_FAC_PHYSIO, TR_PHYSIO_SEGVN_HIT_END,
9164 8979 "segvn_pagelock: cache hit seg %p addr %p", seg, addr);
9165 8980 return (0);
9166 8981 }
9167 8982
9168 8983 /*
9169 8984 * For MAP_SHARED segments we already verified above that segment
9170 8985 * protections allow this pagelock operation.
9171 8986 */
9172 8987 if (pamp == NULL) {
9173 8988 ASSERT(svd->type == MAP_PRIVATE);
9174 8989 if (svd->pageprot == 0) {
9175 8990 if ((svd->prot & protchk) == 0) {
9176 8991 error = EACCES;
9177 8992 goto out;
9178 8993 }
9179 8994 if (svd->prot & PROT_WRITE) {
9180 8995 wlen = lpgeaddr - lpgaddr;
9181 8996 } else {
9182 8997 wlen = 0;
9183 8998 ASSERT(rw == S_READ);
9184 8999 }
9185 9000 } else {
9186 9001 int wcont = 1;
9187 9002 /*
9188 9003 * check page protections
9189 9004 */
9190 9005 for (a = lpgaddr, wlen = 0; a < lpgeaddr; a += pgsz) {
9191 9006 struct vpage *vp;
9192 9007
9193 9008 ASSERT(seg->s_szc == 0 ||
9194 9009 sameprot(seg, a, pgsz));
9195 9010 vp = &svd->vpage[seg_page(seg, a)];
9196 9011 if ((VPP_PROT(vp) & protchk) == 0) {
9197 9012 error = EACCES;
9198 9013 goto out;
9199 9014 }
9200 9015 if (wcont && (VPP_PROT(vp) & PROT_WRITE)) {
9201 9016 wlen += pgsz;
9202 9017 } else {
9203 9018 wcont = 0;
9204 9019 ASSERT(rw == S_READ);
9205 9020 }
9206 9021 }
9207 9022 }
9208 9023 ASSERT(rw == S_READ || wlen == lpgeaddr - lpgaddr);
9209 9024 ASSERT(rw == S_WRITE || wlen <= lpgeaddr - lpgaddr);
9210 9025 }
9211 9026
9212 9027 /*
9213 9028 * Only build large page adjusted shadow list if we expect to insert
9214 9029 * it into pcache. For large enough pages it's a big overhead to
9215 9030 * create a shadow list of the entire large page. But this overhead
9216 9031 * should be amortized over repeated pcache hits on subsequent reuse
9217 9032 * of this shadow list (IO into any range within this shadow list will
9218 9033 * find it in pcache since we large page align the request for pcache
9219 9034 * lookups). pcache performance is improved with bigger shadow lists
9220 9035 * as it reduces the time to pcache the entire big segment and reduces
9221 9036 * pcache chain length.
9222 9037 */
9223 9038 if (seg_pinsert_check(seg, pamp, paddr,
9224 9039 lpgeaddr - lpgaddr, pflags) == SEGP_SUCCESS) {
9225 9040 addr = lpgaddr;
9226 9041 len = lpgeaddr - lpgaddr;
9227 9042 use_pcache = 1;
9228 9043 } else {
9229 9044 use_pcache = 0;
9230 9045 /*
9231 9046 * Since this entry will not be inserted into the pcache, we
9232 9047 * will not do any adjustments to the starting address or
9233 9048 * size of the memory to be locked.
9234 9049 */
9235 9050 adjustpages = 0;
9236 9051 }
9237 9052 npages = btop(len);
9238 9053
9239 9054 pplist = kmem_alloc(sizeof (page_t *) * (npages + 1), KM_SLEEP);
9240 9055 pl = pplist;
9241 9056 *ppp = pplist + adjustpages;
9242 9057 /*
9243 9058 * If use_pcache is 0 this shadow list is not large page adjusted.
9244 9059 * Record this info in the last entry of shadow array so that
9245 9060 * L_PAGEUNLOCK can determine if it should large page adjust the
9246 9061 * address range to find the real range that was locked.
9247 9062 */
9248 9063 pl[npages] = use_pcache ? PCACHE_SHWLIST : NOPCACHE_SHWLIST;
9249 9064
9250 9065 page = seg_page(seg, addr);
9251 9066 anon_index = svd->anon_index + page;
9252 9067
9253 9068 anlock = 0;
9254 9069 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
9255 9070 ASSERT(amp->a_szc >= seg->s_szc);
9256 9071 anpgcnt = page_get_pagecnt(amp->a_szc);
9257 9072 for (a = addr; a < addr + len; a += PAGESIZE, anon_index++) {
9258 9073 struct anon *ap;
9259 9074 struct vnode *vp;
9260 9075 u_offset_t off;
9261 9076
9262 9077 /*
9263 9078 * Lock and unlock anon array only once per large page.
9264 9079 * anon_array_enter() locks the root anon slot according to
9265 9080 * a_szc which can't change while anon map is locked. We lock
9266 9081 * anon the first time through this loop and each time we
9267 9082 * reach anon index that corresponds to a root of a large
9268 9083 * page.
9269 9084 */
9270 9085 if (a == addr || P2PHASE(anon_index, anpgcnt) == 0) {
9271 9086 ASSERT(anlock == 0);
9272 9087 anon_array_enter(amp, anon_index, &cookie);
9273 9088 anlock = 1;
9274 9089 }
9275 9090 ap = anon_get_ptr(amp->ahp, anon_index);
9276 9091
9277 9092 /*
9278 9093 * We must never use seg_pcache for COW pages
9279 9094 * because we might end up with original page still
9280 9095 * lying in seg_pcache even after private page is
9281 9096 * created. This leads to data corruption as
9282 9097 * aio_write refers to the page still in cache
9283 9098 * while all other accesses refer to the private
9284 9099 * page.
9285 9100 */
9286 9101 if (ap == NULL || ap->an_refcnt != 1) {
9287 9102 struct vpage *vpage;
9288 9103
9289 9104 if (seg->s_szc) {
9290 9105 error = EFAULT;
9291 9106 break;
9292 9107 }
9293 9108 if (svd->vpage != NULL) {
9294 9109 vpage = &svd->vpage[seg_page(seg, a)];
9295 9110 } else {
9296 9111 vpage = NULL;
9297 9112 }
9298 9113 ASSERT(anlock);
9299 9114 anon_array_exit(&cookie);
9300 9115 anlock = 0;
9301 9116 pp = NULL;
9302 9117 error = segvn_faultpage(seg->s_as->a_hat, seg, a, 0,
9303 9118 vpage, &pp, 0, F_INVAL, rw, 1);
9304 9119 if (error) {
9305 9120 error = fc_decode(error);
9306 9121 break;
9307 9122 }
9308 9123 anon_array_enter(amp, anon_index, &cookie);
9309 9124 anlock = 1;
9310 9125 ap = anon_get_ptr(amp->ahp, anon_index);
9311 9126 if (ap == NULL || ap->an_refcnt != 1) {
9312 9127 error = EFAULT;
9313 9128 break;
9314 9129 }
9315 9130 }
9316 9131 swap_xlate(ap, &vp, &off);
9317 9132 pp = page_lookup_nowait(vp, off, SE_SHARED);
9318 9133 if (pp == NULL) {
9319 9134 error = EFAULT;
9320 9135 break;
9321 9136 }
9322 9137 if (ap->an_pvp != NULL) {
9323 9138 anon_swap_free(ap, pp);
9324 9139 }
9325 9140 /*
9326 9141 * Unlock anon if this is the last slot in a large page.
9327 9142 */
9328 9143 if (P2PHASE(anon_index, anpgcnt) == anpgcnt - 1) {
9329 9144 ASSERT(anlock);
9330 9145 anon_array_exit(&cookie);
9331 9146 anlock = 0;
9332 9147 }
9333 9148 *pplist++ = pp;
9334 9149 }
9335 9150 if (anlock) { /* Ensure the lock is dropped */
9336 9151 anon_array_exit(&cookie);
9337 9152 }
9338 9153 ANON_LOCK_EXIT(&->a_rwlock);
9339 9154
9340 9155 if (a >= addr + len) {
9341 9156 atomic_add_long((ulong_t *)&svd->softlockcnt, npages);
9342 9157 if (pamp != NULL) {
9343 9158 ASSERT(svd->type == MAP_SHARED);
9344 9159 atomic_add_long((ulong_t *)&pamp->a_softlockcnt,
9345 9160 npages);
9346 9161 wlen = len;
9347 9162 }
9348 9163 if (sftlck_sbase) {
9349 9164 atomic_inc_ulong((ulong_t *)&svd->softlockcnt_sbase);
9350 9165 }
9351 9166 if (sftlck_send) {
9352 9167 atomic_inc_ulong((ulong_t *)&svd->softlockcnt_send);
9353 9168 }
9354 9169 if (use_pcache) {
9355 9170 (void) seg_pinsert(seg, pamp, paddr, len, wlen, pl,
9356 9171 rw, pflags, preclaim_callback);
9357 9172 }
9358 9173 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
9359 9174 TRACE_2(TR_FAC_PHYSIO, TR_PHYSIO_SEGVN_FILL_END,
9360 9175 "segvn_pagelock: cache fill seg %p addr %p", seg, addr);
9361 9176 return (0);
9362 9177 }
9363 9178
9364 9179 pplist = pl;
9365 9180 np = ((uintptr_t)(a - addr)) >> PAGESHIFT;
9366 9181 while (np > (uint_t)0) {
9367 9182 ASSERT(PAGE_LOCKED(*pplist));
9368 9183 page_unlock(*pplist);
9369 9184 np--;
9370 9185 pplist++;
9371 9186 }
9372 9187 kmem_free(pl, sizeof (page_t *) * (npages + 1));
9373 9188 out:
9374 9189 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
9375 9190 *ppp = NULL;
9376 9191 TRACE_2(TR_FAC_PHYSIO, TR_PHYSIO_SEGVN_MISS_END,
9377 9192 "segvn_pagelock: cache miss seg %p addr %p", seg, addr);
9378 9193 return (error);
9379 9194 }
9380 9195
9381 9196 /*
9382 9197 * purge any cached pages in the I/O page cache
9383 9198 */
9384 9199 static void
9385 9200 segvn_purge(struct seg *seg)
9386 9201 {
9387 9202 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
9388 9203
9389 9204 /*
9390 9205 * pcache is only used by pure anon segments.
9391 9206 */
9392 9207 if (svd->amp == NULL || svd->vp != NULL) {
9393 9208 return;
9394 9209 }
9395 9210
9396 9211 /*
9397 9212 * For MAP_SHARED segments non 0 segment's softlockcnt means
9398 9213 * active IO is still in progress via this segment. So we only
9399 9214 * purge MAP_SHARED segments when their softlockcnt is 0.
9400 9215 */
9401 9216 if (svd->type == MAP_PRIVATE) {
9402 9217 if (svd->softlockcnt) {
9403 9218 seg_ppurge(seg, NULL, 0);
9404 9219 }
9405 9220 } else if (svd->softlockcnt == 0 && svd->amp->a_softlockcnt != 0) {
9406 9221 seg_ppurge(seg, svd->amp, 0);
9407 9222 }
9408 9223 }
9409 9224
9410 9225 /*
9411 9226 * If async argument is not 0 we are called from pcache async thread and don't
9412 9227 * hold AS lock.
9413 9228 */
9414 9229
9415 9230 /*ARGSUSED*/
9416 9231 static int
9417 9232 segvn_reclaim(void *ptag, caddr_t addr, size_t len, struct page **pplist,
9418 9233 enum seg_rw rw, int async)
9419 9234 {
9420 9235 struct seg *seg = (struct seg *)ptag;
9421 9236 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
9422 9237 pgcnt_t np, npages;
9423 9238 struct page **pl;
9424 9239
9425 9240 npages = np = btop(len);
9426 9241 ASSERT(npages);
9427 9242
9428 9243 ASSERT(svd->vp == NULL && svd->amp != NULL);
9429 9244 ASSERT(svd->softlockcnt >= npages);
9430 9245 ASSERT(async || AS_LOCK_HELD(seg->s_as));
9431 9246
9432 9247 pl = pplist;
9433 9248
9434 9249 ASSERT(pl[np] == NOPCACHE_SHWLIST || pl[np] == PCACHE_SHWLIST);
9435 9250 ASSERT(!async || pl[np] == PCACHE_SHWLIST);
9436 9251
9437 9252 while (np > (uint_t)0) {
9438 9253 if (rw == S_WRITE) {
9439 9254 hat_setrefmod(*pplist);
9440 9255 } else {
9441 9256 hat_setref(*pplist);
9442 9257 }
9443 9258 page_unlock(*pplist);
9444 9259 np--;
9445 9260 pplist++;
9446 9261 }
9447 9262
9448 9263 kmem_free(pl, sizeof (page_t *) * (npages + 1));
9449 9264
9450 9265 /*
9451 9266 * If we are pcache async thread we don't hold AS lock. This means if
9452 9267 * softlockcnt drops to 0 after the decrement below address space may
9453 9268 * get freed. We can't allow it since after softlock derement to 0 we
9454 9269 * still need to access as structure for possible wakeup of unmap
9455 9270 * waiters. To prevent the disappearance of as we take this segment
9456 9271 * segfree_syncmtx. segvn_free() also takes this mutex as a barrier to
9457 9272 * make sure this routine completes before segment is freed.
9458 9273 *
9459 9274 * The second complication we have to deal with in async case is a
9460 9275 * possibility of missed wake up of unmap wait thread. When we don't
9461 9276 * hold as lock here we may take a_contents lock before unmap wait
9462 9277 * thread that was first to see softlockcnt was still not 0. As a
9463 9278 * result we'll fail to wake up an unmap wait thread. To avoid this
9464 9279 * race we set nounmapwait flag in as structure if we drop softlockcnt
9465 9280 * to 0 when we were called by pcache async thread. unmapwait thread
9466 9281 * will not block if this flag is set.
9467 9282 */
9468 9283 if (async) {
9469 9284 mutex_enter(&svd->segfree_syncmtx);
9470 9285 }
9471 9286
9472 9287 if (!atomic_add_long_nv((ulong_t *)&svd->softlockcnt, -npages)) {
9473 9288 if (async || AS_ISUNMAPWAIT(seg->s_as)) {
9474 9289 mutex_enter(&seg->s_as->a_contents);
9475 9290 if (async) {
9476 9291 AS_SETNOUNMAPWAIT(seg->s_as);
9477 9292 }
9478 9293 if (AS_ISUNMAPWAIT(seg->s_as)) {
9479 9294 AS_CLRUNMAPWAIT(seg->s_as);
9480 9295 cv_broadcast(&seg->s_as->a_cv);
9481 9296 }
9482 9297 mutex_exit(&seg->s_as->a_contents);
9483 9298 }
9484 9299 }
9485 9300
9486 9301 if (async) {
9487 9302 mutex_exit(&svd->segfree_syncmtx);
9488 9303 }
9489 9304 return (0);
9490 9305 }
9491 9306
9492 9307 /*ARGSUSED*/
9493 9308 static int
9494 9309 shamp_reclaim(void *ptag, caddr_t addr, size_t len, struct page **pplist,
9495 9310 enum seg_rw rw, int async)
9496 9311 {
9497 9312 amp_t *amp = (amp_t *)ptag;
9498 9313 pgcnt_t np, npages;
9499 9314 struct page **pl;
9500 9315
9501 9316 npages = np = btop(len);
9502 9317 ASSERT(npages);
9503 9318 ASSERT(amp->a_softlockcnt >= npages);
9504 9319
9505 9320 pl = pplist;
9506 9321
9507 9322 ASSERT(pl[np] == NOPCACHE_SHWLIST || pl[np] == PCACHE_SHWLIST);
9508 9323 ASSERT(!async || pl[np] == PCACHE_SHWLIST);
9509 9324
9510 9325 while (np > (uint_t)0) {
9511 9326 if (rw == S_WRITE) {
9512 9327 hat_setrefmod(*pplist);
9513 9328 } else {
9514 9329 hat_setref(*pplist);
9515 9330 }
9516 9331 page_unlock(*pplist);
9517 9332 np--;
9518 9333 pplist++;
9519 9334 }
9520 9335
9521 9336 kmem_free(pl, sizeof (page_t *) * (npages + 1));
9522 9337
9523 9338 /*
9524 9339 * If somebody sleeps in anonmap_purge() wake them up if a_softlockcnt
9525 9340 * drops to 0. anon map can't be freed until a_softlockcnt drops to 0
9526 9341 * and anonmap_purge() acquires a_purgemtx.
9527 9342 */
9528 9343 mutex_enter(&->a_purgemtx);
9529 9344 if (!atomic_add_long_nv((ulong_t *)&->a_softlockcnt, -npages) &&
9530 9345 amp->a_purgewait) {
9531 9346 amp->a_purgewait = 0;
9532 9347 cv_broadcast(&->a_purgecv);
9533 9348 }
9534 9349 mutex_exit(&->a_purgemtx);
9535 9350 return (0);
9536 9351 }
9537 9352
9538 9353 /*
9539 9354 * get a memory ID for an addr in a given segment
9540 9355 *
9541 9356 * XXX only creates PAGESIZE pages if anon slots are not initialized.
9542 9357 * At fault time they will be relocated into larger pages.
9543 9358 */
9544 9359 static int
9545 9360 segvn_getmemid(struct seg *seg, caddr_t addr, memid_t *memidp)
9546 9361 {
9547 9362 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
9548 9363 struct anon *ap = NULL;
9549 9364 ulong_t anon_index;
9550 9365 struct anon_map *amp;
9551 9366 anon_sync_obj_t cookie;
9552 9367
9553 9368 if (svd->type == MAP_PRIVATE) {
9554 9369 memidp->val[0] = (uintptr_t)seg->s_as;
9555 9370 memidp->val[1] = (uintptr_t)addr;
9556 9371 return (0);
9557 9372 }
9558 9373
9559 9374 if (svd->type == MAP_SHARED) {
9560 9375 if (svd->vp) {
9561 9376 memidp->val[0] = (uintptr_t)svd->vp;
9562 9377 memidp->val[1] = (u_longlong_t)svd->offset +
9563 9378 (uintptr_t)(addr - seg->s_base);
9564 9379 return (0);
9565 9380 } else {
9566 9381
9567 9382 SEGVN_LOCK_ENTER(seg->s_as, &svd->lock, RW_READER);
9568 9383 if ((amp = svd->amp) != NULL) {
9569 9384 anon_index = svd->anon_index +
9570 9385 seg_page(seg, addr);
9571 9386 }
9572 9387 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
9573 9388
9574 9389 ASSERT(amp != NULL);
9575 9390
9576 9391 ANON_LOCK_ENTER(&->a_rwlock, RW_READER);
9577 9392 anon_array_enter(amp, anon_index, &cookie);
9578 9393 ap = anon_get_ptr(amp->ahp, anon_index);
9579 9394 if (ap == NULL) {
9580 9395 page_t *pp;
9581 9396
9582 9397 pp = anon_zero(seg, addr, &ap, svd->cred);
9583 9398 if (pp == NULL) {
9584 9399 anon_array_exit(&cookie);
9585 9400 ANON_LOCK_EXIT(&->a_rwlock);
9586 9401 return (ENOMEM);
9587 9402 }
9588 9403 ASSERT(anon_get_ptr(amp->ahp, anon_index)
9589 9404 == NULL);
9590 9405 (void) anon_set_ptr(amp->ahp, anon_index,
9591 9406 ap, ANON_SLEEP);
9592 9407 page_unlock(pp);
9593 9408 }
9594 9409
9595 9410 anon_array_exit(&cookie);
9596 9411 ANON_LOCK_EXIT(&->a_rwlock);
9597 9412
9598 9413 memidp->val[0] = (uintptr_t)ap;
9599 9414 memidp->val[1] = (uintptr_t)addr & PAGEOFFSET;
9600 9415 return (0);
9601 9416 }
9602 9417 }
9603 9418 return (EINVAL);
9604 9419 }
9605 9420
9606 9421 static int
9607 9422 sameprot(struct seg *seg, caddr_t a, size_t len)
9608 9423 {
9609 9424 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
9610 9425 struct vpage *vpage;
9611 9426 spgcnt_t pages = btop(len);
9612 9427 uint_t prot;
9613 9428
9614 9429 if (svd->pageprot == 0)
9615 9430 return (1);
9616 9431
9617 9432 ASSERT(svd->vpage != NULL);
9618 9433
9619 9434 vpage = &svd->vpage[seg_page(seg, a)];
9620 9435 prot = VPP_PROT(vpage);
9621 9436 vpage++;
9622 9437 pages--;
9623 9438 while (pages-- > 0) {
9624 9439 if (prot != VPP_PROT(vpage))
9625 9440 return (0);
9626 9441 vpage++;
9627 9442 }
9628 9443 return (1);
9629 9444 }
9630 9445
9631 9446 /*
9632 9447 * Get memory allocation policy info for specified address in given segment
9633 9448 */
9634 9449 static lgrp_mem_policy_info_t *
9635 9450 segvn_getpolicy(struct seg *seg, caddr_t addr)
9636 9451 {
9637 9452 struct anon_map *amp;
9638 9453 ulong_t anon_index;
9639 9454 lgrp_mem_policy_info_t *policy_info;
9640 9455 struct segvn_data *svn_data;
9641 9456 u_offset_t vn_off;
9642 9457 vnode_t *vp;
9643 9458
9644 9459 ASSERT(seg != NULL);
9645 9460
9646 9461 svn_data = (struct segvn_data *)seg->s_data;
9647 9462 if (svn_data == NULL)
9648 9463 return (NULL);
9649 9464
9650 9465 /*
9651 9466 * Get policy info for private or shared memory
9652 9467 */
9653 9468 if (svn_data->type != MAP_SHARED) {
9654 9469 if (svn_data->tr_state != SEGVN_TR_ON) {
9655 9470 policy_info = &svn_data->policy_info;
9656 9471 } else {
9657 9472 policy_info = &svn_data->tr_policy_info;
9658 9473 ASSERT(policy_info->mem_policy ==
9659 9474 LGRP_MEM_POLICY_NEXT_SEG);
9660 9475 }
9661 9476 } else {
9662 9477 amp = svn_data->amp;
9663 9478 anon_index = svn_data->anon_index + seg_page(seg, addr);
9664 9479 vp = svn_data->vp;
9665 9480 vn_off = svn_data->offset + (uintptr_t)(addr - seg->s_base);
9666 9481 policy_info = lgrp_shm_policy_get(amp, anon_index, vp, vn_off);
9667 9482 }
9668 9483
9669 9484 return (policy_info);
9670 9485 }
9671 9486
9672 9487 /*ARGSUSED*/
9673 9488 static int
9674 9489 segvn_capable(struct seg *seg, segcapability_t capability)
9675 9490 {
9676 9491 return (0);
9677 9492 }
9678 9493
9679 9494 /*
9680 9495 * Bind text vnode segment to an amp. If we bind successfully mappings will be
9681 9496 * established to per vnode mapping per lgroup amp pages instead of to vnode
9682 9497 * pages. There's one amp per vnode text mapping per lgroup. Many processes
9683 9498 * may share the same text replication amp. If a suitable amp doesn't already
9684 9499 * exist in svntr hash table create a new one. We may fail to bind to amp if
9685 9500 * segment is not eligible for text replication. Code below first checks for
9686 9501 * these conditions. If binding is successful segment tr_state is set to on
9687 9502 * and svd->amp points to the amp to use. Otherwise tr_state is set to off and
9688 9503 * svd->amp remains as NULL.
9689 9504 */
9690 9505 static void
9691 9506 segvn_textrepl(struct seg *seg)
9692 9507 {
9693 9508 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
9694 9509 vnode_t *vp = svd->vp;
9695 9510 u_offset_t off = svd->offset;
9696 9511 size_t size = seg->s_size;
9697 9512 u_offset_t eoff = off + size;
9698 9513 uint_t szc = seg->s_szc;
9699 9514 ulong_t hash = SVNTR_HASH_FUNC(vp);
9700 9515 svntr_t *svntrp;
9701 9516 struct vattr va;
9702 9517 proc_t *p = seg->s_as->a_proc;
9703 9518 lgrp_id_t lgrp_id;
9704 9519 lgrp_id_t olid;
9705 9520 int first;
9706 9521 struct anon_map *amp;
9707 9522
9708 9523 ASSERT(AS_LOCK_HELD(seg->s_as));
9709 9524 ASSERT(SEGVN_WRITE_HELD(seg->s_as, &svd->lock));
9710 9525 ASSERT(p != NULL);
9711 9526 ASSERT(svd->tr_state == SEGVN_TR_INIT);
9712 9527 ASSERT(!HAT_IS_REGION_COOKIE_VALID(svd->rcookie));
9713 9528 ASSERT(svd->flags & MAP_TEXT);
9714 9529 ASSERT(svd->type == MAP_PRIVATE);
9715 9530 ASSERT(vp != NULL && svd->amp == NULL);
9716 9531 ASSERT(!svd->pageprot && !(svd->prot & PROT_WRITE));
9717 9532 ASSERT(!(svd->flags & MAP_NORESERVE) && svd->swresv == 0);
9718 9533 ASSERT(seg->s_as != &kas);
9719 9534 ASSERT(off < eoff);
9720 9535 ASSERT(svntr_hashtab != NULL);
9721 9536
9722 9537 /*
9723 9538 * If numa optimizations are no longer desired bail out.
9724 9539 */
9725 9540 if (!lgrp_optimizations()) {
9726 9541 svd->tr_state = SEGVN_TR_OFF;
9727 9542 return;
9728 9543 }
9729 9544
9730 9545 /*
9731 9546 * Avoid creating anon maps with size bigger than the file size.
9732 9547 * If VOP_GETATTR() call fails bail out.
9733 9548 */
9734 9549 va.va_mask = AT_SIZE | AT_MTIME | AT_CTIME;
9735 9550 if (VOP_GETATTR(vp, &va, 0, svd->cred, NULL) != 0) {
9736 9551 svd->tr_state = SEGVN_TR_OFF;
9737 9552 SEGVN_TR_ADDSTAT(gaerr);
9738 9553 return;
9739 9554 }
9740 9555 if (btopr(va.va_size) < btopr(eoff)) {
9741 9556 svd->tr_state = SEGVN_TR_OFF;
9742 9557 SEGVN_TR_ADDSTAT(overmap);
9743 9558 return;
9744 9559 }
9745 9560
9746 9561 /*
9747 9562 * VVMEXEC may not be set yet if exec() prefaults text segment. Set
9748 9563 * this flag now before vn_is_mapped(V_WRITE) so that MAP_SHARED
9749 9564 * mapping that checks if trcache for this vnode needs to be
9750 9565 * invalidated can't miss us.
9751 9566 */
9752 9567 if (!(vp->v_flag & VVMEXEC)) {
9753 9568 mutex_enter(&vp->v_lock);
9754 9569 vp->v_flag |= VVMEXEC;
9755 9570 mutex_exit(&vp->v_lock);
9756 9571 }
9757 9572 mutex_enter(&svntr_hashtab[hash].tr_lock);
9758 9573 /*
9759 9574 * Bail out if potentially MAP_SHARED writable mappings exist to this
9760 9575 * vnode. We don't want to use old file contents from existing
9761 9576 * replicas if this mapping was established after the original file
9762 9577 * was changed.
9763 9578 */
9764 9579 if (vn_is_mapped(vp, V_WRITE)) {
9765 9580 mutex_exit(&svntr_hashtab[hash].tr_lock);
9766 9581 svd->tr_state = SEGVN_TR_OFF;
9767 9582 SEGVN_TR_ADDSTAT(wrcnt);
9768 9583 return;
9769 9584 }
9770 9585 svntrp = svntr_hashtab[hash].tr_head;
9771 9586 for (; svntrp != NULL; svntrp = svntrp->tr_next) {
9772 9587 ASSERT(svntrp->tr_refcnt != 0);
9773 9588 if (svntrp->tr_vp != vp) {
9774 9589 continue;
9775 9590 }
9776 9591
9777 9592 /*
9778 9593 * Bail out if the file or its attributes were changed after
9779 9594 * this replication entry was created since we need to use the
9780 9595 * latest file contents. Note that mtime test alone is not
9781 9596 * sufficient because a user can explicitly change mtime via
9782 9597 * utimes(2) interfaces back to the old value after modifiying
9783 9598 * the file contents. To detect this case we also have to test
9784 9599 * ctime which among other things records the time of the last
9785 9600 * mtime change by utimes(2). ctime is not changed when the file
9786 9601 * is only read or executed so we expect that typically existing
9787 9602 * replication amp's can be used most of the time.
9788 9603 */
9789 9604 if (!svntrp->tr_valid ||
9790 9605 svntrp->tr_mtime.tv_sec != va.va_mtime.tv_sec ||
9791 9606 svntrp->tr_mtime.tv_nsec != va.va_mtime.tv_nsec ||
9792 9607 svntrp->tr_ctime.tv_sec != va.va_ctime.tv_sec ||
9793 9608 svntrp->tr_ctime.tv_nsec != va.va_ctime.tv_nsec) {
9794 9609 mutex_exit(&svntr_hashtab[hash].tr_lock);
9795 9610 svd->tr_state = SEGVN_TR_OFF;
9796 9611 SEGVN_TR_ADDSTAT(stale);
9797 9612 return;
9798 9613 }
9799 9614 /*
9800 9615 * if off, eoff and szc match current segment we found the
9801 9616 * existing entry we can use.
9802 9617 */
9803 9618 if (svntrp->tr_off == off && svntrp->tr_eoff == eoff &&
9804 9619 svntrp->tr_szc == szc) {
9805 9620 break;
9806 9621 }
9807 9622 /*
9808 9623 * Don't create different but overlapping in file offsets
9809 9624 * entries to avoid replication of the same file pages more
9810 9625 * than once per lgroup.
9811 9626 */
9812 9627 if ((off >= svntrp->tr_off && off < svntrp->tr_eoff) ||
9813 9628 (eoff > svntrp->tr_off && eoff <= svntrp->tr_eoff)) {
9814 9629 mutex_exit(&svntr_hashtab[hash].tr_lock);
9815 9630 svd->tr_state = SEGVN_TR_OFF;
9816 9631 SEGVN_TR_ADDSTAT(overlap);
9817 9632 return;
9818 9633 }
9819 9634 }
9820 9635 /*
9821 9636 * If we didn't find existing entry create a new one.
9822 9637 */
9823 9638 if (svntrp == NULL) {
9824 9639 svntrp = kmem_cache_alloc(svntr_cache, KM_NOSLEEP);
9825 9640 if (svntrp == NULL) {
9826 9641 mutex_exit(&svntr_hashtab[hash].tr_lock);
9827 9642 svd->tr_state = SEGVN_TR_OFF;
9828 9643 SEGVN_TR_ADDSTAT(nokmem);
9829 9644 return;
9830 9645 }
9831 9646 #ifdef DEBUG
9832 9647 {
9833 9648 lgrp_id_t i;
9834 9649 for (i = 0; i < NLGRPS_MAX; i++) {
9835 9650 ASSERT(svntrp->tr_amp[i] == NULL);
9836 9651 }
9837 9652 }
9838 9653 #endif /* DEBUG */
9839 9654 svntrp->tr_vp = vp;
9840 9655 svntrp->tr_off = off;
9841 9656 svntrp->tr_eoff = eoff;
9842 9657 svntrp->tr_szc = szc;
9843 9658 svntrp->tr_valid = 1;
9844 9659 svntrp->tr_mtime = va.va_mtime;
9845 9660 svntrp->tr_ctime = va.va_ctime;
9846 9661 svntrp->tr_refcnt = 0;
9847 9662 svntrp->tr_next = svntr_hashtab[hash].tr_head;
9848 9663 svntr_hashtab[hash].tr_head = svntrp;
9849 9664 }
9850 9665 first = 1;
9851 9666 again:
9852 9667 /*
9853 9668 * We want to pick a replica with pages on main thread's (t_tid = 1,
9854 9669 * aka T1) lgrp. Currently text replication is only optimized for
9855 9670 * workloads that either have all threads of a process on the same
9856 9671 * lgrp or execute their large text primarily on main thread.
9857 9672 */
9858 9673 lgrp_id = p->p_t1_lgrpid;
9859 9674 if (lgrp_id == LGRP_NONE) {
9860 9675 /*
9861 9676 * In case exec() prefaults text on non main thread use
9862 9677 * current thread lgrpid. It will become main thread anyway
9863 9678 * soon.
9864 9679 */
9865 9680 lgrp_id = lgrp_home_id(curthread);
9866 9681 }
9867 9682 /*
9868 9683 * Set p_tr_lgrpid to lgrpid if it hasn't been set yet. Otherwise
9869 9684 * just set it to NLGRPS_MAX if it's different from current process T1
9870 9685 * home lgrp. p_tr_lgrpid is used to detect if process uses text
9871 9686 * replication and T1 new home is different from lgrp used for text
9872 9687 * replication. When this happens asyncronous segvn thread rechecks if
9873 9688 * segments should change lgrps used for text replication. If we fail
9874 9689 * to set p_tr_lgrpid with atomic_cas_32 then set it to NLGRPS_MAX
9875 9690 * without cas if it's not already NLGRPS_MAX and not equal lgrp_id
9876 9691 * we want to use. We don't need to use cas in this case because
9877 9692 * another thread that races in between our non atomic check and set
9878 9693 * may only change p_tr_lgrpid to NLGRPS_MAX at this point.
9879 9694 */
9880 9695 ASSERT(lgrp_id != LGRP_NONE && lgrp_id < NLGRPS_MAX);
9881 9696 olid = p->p_tr_lgrpid;
9882 9697 if (lgrp_id != olid && olid != NLGRPS_MAX) {
9883 9698 lgrp_id_t nlid = (olid == LGRP_NONE) ? lgrp_id : NLGRPS_MAX;
9884 9699 if (atomic_cas_32((uint32_t *)&p->p_tr_lgrpid, olid, nlid) !=
9885 9700 olid) {
9886 9701 olid = p->p_tr_lgrpid;
9887 9702 ASSERT(olid != LGRP_NONE);
9888 9703 if (olid != lgrp_id && olid != NLGRPS_MAX) {
9889 9704 p->p_tr_lgrpid = NLGRPS_MAX;
9890 9705 }
9891 9706 }
9892 9707 ASSERT(p->p_tr_lgrpid != LGRP_NONE);
9893 9708 membar_producer();
9894 9709 /*
9895 9710 * lgrp_move_thread() won't schedule async recheck after
9896 9711 * p->p_t1_lgrpid update unless p->p_tr_lgrpid is not
9897 9712 * LGRP_NONE. Recheck p_t1_lgrpid once now that p->p_tr_lgrpid
9898 9713 * is not LGRP_NONE.
9899 9714 */
9900 9715 if (first && p->p_t1_lgrpid != LGRP_NONE &&
9901 9716 p->p_t1_lgrpid != lgrp_id) {
9902 9717 first = 0;
9903 9718 goto again;
9904 9719 }
9905 9720 }
9906 9721 /*
9907 9722 * If no amp was created yet for lgrp_id create a new one as long as
9908 9723 * we have enough memory to afford it.
9909 9724 */
9910 9725 if ((amp = svntrp->tr_amp[lgrp_id]) == NULL) {
9911 9726 size_t trmem = atomic_add_long_nv(&segvn_textrepl_bytes, size);
9912 9727 if (trmem > segvn_textrepl_max_bytes) {
9913 9728 SEGVN_TR_ADDSTAT(normem);
9914 9729 goto fail;
9915 9730 }
9916 9731 if (anon_try_resv_zone(size, NULL) == 0) {
9917 9732 SEGVN_TR_ADDSTAT(noanon);
9918 9733 goto fail;
9919 9734 }
9920 9735 amp = anonmap_alloc(size, size, ANON_NOSLEEP);
9921 9736 if (amp == NULL) {
9922 9737 anon_unresv_zone(size, NULL);
9923 9738 SEGVN_TR_ADDSTAT(nokmem);
9924 9739 goto fail;
9925 9740 }
9926 9741 ASSERT(amp->refcnt == 1);
9927 9742 amp->a_szc = szc;
9928 9743 svntrp->tr_amp[lgrp_id] = amp;
9929 9744 SEGVN_TR_ADDSTAT(newamp);
9930 9745 }
9931 9746 svntrp->tr_refcnt++;
9932 9747 ASSERT(svd->svn_trnext == NULL);
9933 9748 ASSERT(svd->svn_trprev == NULL);
9934 9749 svd->svn_trnext = svntrp->tr_svnhead;
9935 9750 svd->svn_trprev = NULL;
9936 9751 if (svntrp->tr_svnhead != NULL) {
9937 9752 svntrp->tr_svnhead->svn_trprev = svd;
9938 9753 }
9939 9754 svntrp->tr_svnhead = svd;
9940 9755 ASSERT(amp->a_szc == szc && amp->size == size && amp->swresv == size);
9941 9756 ASSERT(amp->refcnt >= 1);
9942 9757 svd->amp = amp;
9943 9758 svd->anon_index = 0;
9944 9759 svd->tr_policy_info.mem_policy = LGRP_MEM_POLICY_NEXT_SEG;
9945 9760 svd->tr_policy_info.mem_lgrpid = lgrp_id;
9946 9761 svd->tr_state = SEGVN_TR_ON;
9947 9762 mutex_exit(&svntr_hashtab[hash].tr_lock);
9948 9763 SEGVN_TR_ADDSTAT(repl);
9949 9764 return;
9950 9765 fail:
9951 9766 ASSERT(segvn_textrepl_bytes >= size);
9952 9767 atomic_add_long(&segvn_textrepl_bytes, -size);
9953 9768 ASSERT(svntrp != NULL);
9954 9769 ASSERT(svntrp->tr_amp[lgrp_id] == NULL);
9955 9770 if (svntrp->tr_refcnt == 0) {
9956 9771 ASSERT(svntrp == svntr_hashtab[hash].tr_head);
9957 9772 svntr_hashtab[hash].tr_head = svntrp->tr_next;
9958 9773 mutex_exit(&svntr_hashtab[hash].tr_lock);
9959 9774 kmem_cache_free(svntr_cache, svntrp);
9960 9775 } else {
9961 9776 mutex_exit(&svntr_hashtab[hash].tr_lock);
9962 9777 }
9963 9778 svd->tr_state = SEGVN_TR_OFF;
9964 9779 }
9965 9780
9966 9781 /*
9967 9782 * Convert seg back to regular vnode mapping seg by unbinding it from its text
9968 9783 * replication amp. This routine is most typically called when segment is
9969 9784 * unmapped but can also be called when segment no longer qualifies for text
9970 9785 * replication (e.g. due to protection changes). If unload_unmap is set use
9971 9786 * HAT_UNLOAD_UNMAP flag in hat_unload_callback(). If we are the last user of
9972 9787 * svntr free all its anon maps and remove it from the hash table.
9973 9788 */
9974 9789 static void
9975 9790 segvn_textunrepl(struct seg *seg, int unload_unmap)
9976 9791 {
9977 9792 struct segvn_data *svd = (struct segvn_data *)seg->s_data;
9978 9793 vnode_t *vp = svd->vp;
9979 9794 u_offset_t off = svd->offset;
9980 9795 size_t size = seg->s_size;
9981 9796 u_offset_t eoff = off + size;
9982 9797 uint_t szc = seg->s_szc;
9983 9798 ulong_t hash = SVNTR_HASH_FUNC(vp);
9984 9799 svntr_t *svntrp;
9985 9800 svntr_t **prv_svntrp;
9986 9801 lgrp_id_t lgrp_id = svd->tr_policy_info.mem_lgrpid;
9987 9802 lgrp_id_t i;
9988 9803
9989 9804 ASSERT(AS_LOCK_HELD(seg->s_as));
9990 9805 ASSERT(AS_WRITE_HELD(seg->s_as) ||
9991 9806 SEGVN_WRITE_HELD(seg->s_as, &svd->lock));
9992 9807 ASSERT(svd->tr_state == SEGVN_TR_ON);
9993 9808 ASSERT(!HAT_IS_REGION_COOKIE_VALID(svd->rcookie));
9994 9809 ASSERT(svd->amp != NULL);
9995 9810 ASSERT(svd->amp->refcnt >= 1);
9996 9811 ASSERT(svd->anon_index == 0);
9997 9812 ASSERT(lgrp_id != LGRP_NONE && lgrp_id < NLGRPS_MAX);
9998 9813 ASSERT(svntr_hashtab != NULL);
9999 9814
10000 9815 mutex_enter(&svntr_hashtab[hash].tr_lock);
10001 9816 prv_svntrp = &svntr_hashtab[hash].tr_head;
10002 9817 for (; (svntrp = *prv_svntrp) != NULL; prv_svntrp = &svntrp->tr_next) {
10003 9818 ASSERT(svntrp->tr_refcnt != 0);
10004 9819 if (svntrp->tr_vp == vp && svntrp->tr_off == off &&
10005 9820 svntrp->tr_eoff == eoff && svntrp->tr_szc == szc) {
10006 9821 break;
10007 9822 }
10008 9823 }
10009 9824 if (svntrp == NULL) {
10010 9825 panic("segvn_textunrepl: svntr record not found");
10011 9826 }
10012 9827 if (svntrp->tr_amp[lgrp_id] != svd->amp) {
10013 9828 panic("segvn_textunrepl: amp mismatch");
10014 9829 }
10015 9830 svd->tr_state = SEGVN_TR_OFF;
10016 9831 svd->amp = NULL;
10017 9832 if (svd->svn_trprev == NULL) {
10018 9833 ASSERT(svntrp->tr_svnhead == svd);
10019 9834 svntrp->tr_svnhead = svd->svn_trnext;
10020 9835 if (svntrp->tr_svnhead != NULL) {
10021 9836 svntrp->tr_svnhead->svn_trprev = NULL;
10022 9837 }
10023 9838 svd->svn_trnext = NULL;
10024 9839 } else {
10025 9840 svd->svn_trprev->svn_trnext = svd->svn_trnext;
10026 9841 if (svd->svn_trnext != NULL) {
10027 9842 svd->svn_trnext->svn_trprev = svd->svn_trprev;
10028 9843 svd->svn_trnext = NULL;
10029 9844 }
10030 9845 svd->svn_trprev = NULL;
10031 9846 }
10032 9847 if (--svntrp->tr_refcnt) {
10033 9848 mutex_exit(&svntr_hashtab[hash].tr_lock);
10034 9849 goto done;
10035 9850 }
10036 9851 *prv_svntrp = svntrp->tr_next;
10037 9852 mutex_exit(&svntr_hashtab[hash].tr_lock);
10038 9853 for (i = 0; i < NLGRPS_MAX; i++) {
10039 9854 struct anon_map *amp = svntrp->tr_amp[i];
10040 9855 if (amp == NULL) {
10041 9856 continue;
10042 9857 }
10043 9858 ASSERT(amp->refcnt == 1);
10044 9859 ASSERT(amp->swresv == size);
10045 9860 ASSERT(amp->size == size);
10046 9861 ASSERT(amp->a_szc == szc);
10047 9862 if (amp->a_szc != 0) {
10048 9863 anon_free_pages(amp->ahp, 0, size, szc);
10049 9864 } else {
10050 9865 anon_free(amp->ahp, 0, size);
10051 9866 }
10052 9867 svntrp->tr_amp[i] = NULL;
10053 9868 ASSERT(segvn_textrepl_bytes >= size);
10054 9869 atomic_add_long(&segvn_textrepl_bytes, -size);
10055 9870 anon_unresv_zone(amp->swresv, NULL);
10056 9871 amp->refcnt = 0;
10057 9872 anonmap_free(amp);
10058 9873 }
10059 9874 kmem_cache_free(svntr_cache, svntrp);
10060 9875 done:
10061 9876 hat_unload_callback(seg->s_as->a_hat, seg->s_base, size,
10062 9877 unload_unmap ? HAT_UNLOAD_UNMAP : 0, NULL);
10063 9878 }
10064 9879
10065 9880 /*
10066 9881 * This is called when a MAP_SHARED writable mapping is created to a vnode
10067 9882 * that is currently used for execution (VVMEXEC flag is set). In this case we
10068 9883 * need to prevent further use of existing replicas.
10069 9884 */
10070 9885 static void
10071 9886 segvn_inval_trcache(vnode_t *vp)
10072 9887 {
10073 9888 ulong_t hash = SVNTR_HASH_FUNC(vp);
10074 9889 svntr_t *svntrp;
10075 9890
10076 9891 ASSERT(vp->v_flag & VVMEXEC);
10077 9892
10078 9893 if (svntr_hashtab == NULL) {
10079 9894 return;
10080 9895 }
10081 9896
10082 9897 mutex_enter(&svntr_hashtab[hash].tr_lock);
10083 9898 svntrp = svntr_hashtab[hash].tr_head;
10084 9899 for (; svntrp != NULL; svntrp = svntrp->tr_next) {
10085 9900 ASSERT(svntrp->tr_refcnt != 0);
10086 9901 if (svntrp->tr_vp == vp && svntrp->tr_valid) {
10087 9902 svntrp->tr_valid = 0;
10088 9903 }
10089 9904 }
10090 9905 mutex_exit(&svntr_hashtab[hash].tr_lock);
10091 9906 }
10092 9907
10093 9908 static void
10094 9909 segvn_trasync_thread(void)
10095 9910 {
10096 9911 callb_cpr_t cpr_info;
10097 9912 kmutex_t cpr_lock; /* just for CPR stuff */
10098 9913
10099 9914 mutex_init(&cpr_lock, NULL, MUTEX_DEFAULT, NULL);
10100 9915
10101 9916 CALLB_CPR_INIT(&cpr_info, &cpr_lock,
10102 9917 callb_generic_cpr, "segvn_async");
10103 9918
10104 9919 if (segvn_update_textrepl_interval == 0) {
10105 9920 segvn_update_textrepl_interval = segvn_update_tr_time * hz;
10106 9921 } else {
10107 9922 segvn_update_textrepl_interval *= hz;
10108 9923 }
10109 9924 (void) timeout(segvn_trupdate_wakeup, NULL,
10110 9925 segvn_update_textrepl_interval);
10111 9926
10112 9927 for (;;) {
10113 9928 mutex_enter(&cpr_lock);
10114 9929 CALLB_CPR_SAFE_BEGIN(&cpr_info);
10115 9930 mutex_exit(&cpr_lock);
10116 9931 sema_p(&segvn_trasync_sem);
10117 9932 mutex_enter(&cpr_lock);
10118 9933 CALLB_CPR_SAFE_END(&cpr_info, &cpr_lock);
10119 9934 mutex_exit(&cpr_lock);
10120 9935 segvn_trupdate();
10121 9936 }
10122 9937 }
10123 9938
10124 9939 static uint64_t segvn_lgrp_trthr_migrs_snpsht = 0;
10125 9940
10126 9941 static void
10127 9942 segvn_trupdate_wakeup(void *dummy)
10128 9943 {
10129 9944 uint64_t cur_lgrp_trthr_migrs = lgrp_get_trthr_migrations();
10130 9945
10131 9946 if (cur_lgrp_trthr_migrs != segvn_lgrp_trthr_migrs_snpsht) {
10132 9947 segvn_lgrp_trthr_migrs_snpsht = cur_lgrp_trthr_migrs;
10133 9948 sema_v(&segvn_trasync_sem);
10134 9949 }
10135 9950
10136 9951 if (!segvn_disable_textrepl_update &&
10137 9952 segvn_update_textrepl_interval != 0) {
10138 9953 (void) timeout(segvn_trupdate_wakeup, dummy,
10139 9954 segvn_update_textrepl_interval);
10140 9955 }
10141 9956 }
10142 9957
10143 9958 static void
10144 9959 segvn_trupdate(void)
10145 9960 {
10146 9961 ulong_t hash;
10147 9962 svntr_t *svntrp;
10148 9963 segvn_data_t *svd;
10149 9964
10150 9965 ASSERT(svntr_hashtab != NULL);
10151 9966
10152 9967 for (hash = 0; hash < svntr_hashtab_sz; hash++) {
10153 9968 mutex_enter(&svntr_hashtab[hash].tr_lock);
10154 9969 svntrp = svntr_hashtab[hash].tr_head;
10155 9970 for (; svntrp != NULL; svntrp = svntrp->tr_next) {
10156 9971 ASSERT(svntrp->tr_refcnt != 0);
10157 9972 svd = svntrp->tr_svnhead;
10158 9973 for (; svd != NULL; svd = svd->svn_trnext) {
10159 9974 segvn_trupdate_seg(svd->seg, svd, svntrp,
10160 9975 hash);
10161 9976 }
10162 9977 }
10163 9978 mutex_exit(&svntr_hashtab[hash].tr_lock);
10164 9979 }
10165 9980 }
10166 9981
10167 9982 static void
10168 9983 segvn_trupdate_seg(struct seg *seg,
10169 9984 segvn_data_t *svd,
10170 9985 svntr_t *svntrp,
10171 9986 ulong_t hash)
10172 9987 {
10173 9988 proc_t *p;
10174 9989 lgrp_id_t lgrp_id;
10175 9990 struct as *as;
10176 9991 size_t size;
10177 9992 struct anon_map *amp;
10178 9993
10179 9994 ASSERT(svd->vp != NULL);
10180 9995 ASSERT(svd->vp == svntrp->tr_vp);
10181 9996 ASSERT(svd->offset == svntrp->tr_off);
10182 9997 ASSERT(svd->offset + seg->s_size == svntrp->tr_eoff);
10183 9998 ASSERT(seg != NULL);
10184 9999 ASSERT(svd->seg == seg);
10185 10000 ASSERT(seg->s_data == (void *)svd);
10186 10001 ASSERT(seg->s_szc == svntrp->tr_szc);
10187 10002 ASSERT(svd->tr_state == SEGVN_TR_ON);
10188 10003 ASSERT(!HAT_IS_REGION_COOKIE_VALID(svd->rcookie));
10189 10004 ASSERT(svd->amp != NULL);
10190 10005 ASSERT(svd->tr_policy_info.mem_policy == LGRP_MEM_POLICY_NEXT_SEG);
10191 10006 ASSERT(svd->tr_policy_info.mem_lgrpid != LGRP_NONE);
10192 10007 ASSERT(svd->tr_policy_info.mem_lgrpid < NLGRPS_MAX);
10193 10008 ASSERT(svntrp->tr_amp[svd->tr_policy_info.mem_lgrpid] == svd->amp);
10194 10009 ASSERT(svntrp->tr_refcnt != 0);
10195 10010 ASSERT(mutex_owned(&svntr_hashtab[hash].tr_lock));
10196 10011
10197 10012 as = seg->s_as;
10198 10013 ASSERT(as != NULL && as != &kas);
10199 10014 p = as->a_proc;
10200 10015 ASSERT(p != NULL);
10201 10016 ASSERT(p->p_tr_lgrpid != LGRP_NONE);
10202 10017 lgrp_id = p->p_t1_lgrpid;
10203 10018 if (lgrp_id == LGRP_NONE) {
10204 10019 return;
10205 10020 }
10206 10021 ASSERT(lgrp_id < NLGRPS_MAX);
10207 10022 if (svd->tr_policy_info.mem_lgrpid == lgrp_id) {
10208 10023 return;
10209 10024 }
10210 10025
10211 10026 /*
10212 10027 * Use tryenter locking since we are locking as/seg and svntr hash
10213 10028 * lock in reverse from syncrounous thread order.
10214 10029 */
10215 10030 if (!AS_LOCK_TRYENTER(as, RW_READER)) {
10216 10031 SEGVN_TR_ADDSTAT(nolock);
10217 10032 if (segvn_lgrp_trthr_migrs_snpsht) {
10218 10033 segvn_lgrp_trthr_migrs_snpsht = 0;
10219 10034 }
10220 10035 return;
10221 10036 }
10222 10037 if (!SEGVN_LOCK_TRYENTER(seg->s_as, &svd->lock, RW_WRITER)) {
10223 10038 AS_LOCK_EXIT(as);
10224 10039 SEGVN_TR_ADDSTAT(nolock);
10225 10040 if (segvn_lgrp_trthr_migrs_snpsht) {
10226 10041 segvn_lgrp_trthr_migrs_snpsht = 0;
10227 10042 }
10228 10043 return;
10229 10044 }
10230 10045 size = seg->s_size;
10231 10046 if (svntrp->tr_amp[lgrp_id] == NULL) {
10232 10047 size_t trmem = atomic_add_long_nv(&segvn_textrepl_bytes, size);
10233 10048 if (trmem > segvn_textrepl_max_bytes) {
10234 10049 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
10235 10050 AS_LOCK_EXIT(as);
10236 10051 atomic_add_long(&segvn_textrepl_bytes, -size);
10237 10052 SEGVN_TR_ADDSTAT(normem);
10238 10053 return;
10239 10054 }
10240 10055 if (anon_try_resv_zone(size, NULL) == 0) {
10241 10056 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
10242 10057 AS_LOCK_EXIT(as);
10243 10058 atomic_add_long(&segvn_textrepl_bytes, -size);
10244 10059 SEGVN_TR_ADDSTAT(noanon);
10245 10060 return;
10246 10061 }
10247 10062 amp = anonmap_alloc(size, size, KM_NOSLEEP);
10248 10063 if (amp == NULL) {
10249 10064 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
10250 10065 AS_LOCK_EXIT(as);
10251 10066 atomic_add_long(&segvn_textrepl_bytes, -size);
10252 10067 anon_unresv_zone(size, NULL);
10253 10068 SEGVN_TR_ADDSTAT(nokmem);
10254 10069 return;
10255 10070 }
10256 10071 ASSERT(amp->refcnt == 1);
10257 10072 amp->a_szc = seg->s_szc;
10258 10073 svntrp->tr_amp[lgrp_id] = amp;
10259 10074 }
10260 10075 /*
10261 10076 * We don't need to drop the bucket lock but here we give other
10262 10077 * threads a chance. svntr and svd can't be unlinked as long as
10263 10078 * segment lock is held as a writer and AS held as well. After we
10264 10079 * retake bucket lock we'll continue from where we left. We'll be able
10265 10080 * to reach the end of either list since new entries are always added
10266 10081 * to the beginning of the lists.
10267 10082 */
10268 10083 mutex_exit(&svntr_hashtab[hash].tr_lock);
10269 10084 hat_unload_callback(as->a_hat, seg->s_base, size, 0, NULL);
10270 10085 mutex_enter(&svntr_hashtab[hash].tr_lock);
10271 10086
10272 10087 ASSERT(svd->tr_state == SEGVN_TR_ON);
10273 10088 ASSERT(svd->amp != NULL);
10274 10089 ASSERT(svd->tr_policy_info.mem_policy == LGRP_MEM_POLICY_NEXT_SEG);
10275 10090 ASSERT(svd->tr_policy_info.mem_lgrpid != lgrp_id);
10276 10091 ASSERT(svd->amp != svntrp->tr_amp[lgrp_id]);
10277 10092
10278 10093 svd->tr_policy_info.mem_lgrpid = lgrp_id;
10279 10094 svd->amp = svntrp->tr_amp[lgrp_id];
10280 10095 p->p_tr_lgrpid = NLGRPS_MAX;
10281 10096 SEGVN_LOCK_EXIT(seg->s_as, &svd->lock);
10282 10097 AS_LOCK_EXIT(as);
10283 10098
10284 10099 ASSERT(svntrp->tr_refcnt != 0);
10285 10100 ASSERT(svd->vp == svntrp->tr_vp);
10286 10101 ASSERT(svd->tr_policy_info.mem_lgrpid == lgrp_id);
10287 10102 ASSERT(svd->amp != NULL && svd->amp == svntrp->tr_amp[lgrp_id]);
10288 10103 ASSERT(svd->seg == seg);
10289 10104 ASSERT(svd->tr_state == SEGVN_TR_ON);
10290 10105
10291 10106 SEGVN_TR_ADDSTAT(asyncrepl);
10292 10107 }
|
↓ open down ↓ |
3049 lines elided |
↑ open up ↑ |
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX