[alsa-devel] [PATCH 2/7] ALSA: core: Add managed card creation

[Takashi Sakamoto]

Hi,

On Sep 21 2018 00:54, Takashi Iwai wrote:
> Per popular demands, this patch adds a new ALSA core API function,
> snd_devm_card_new(), to create a snd_card object in a managed way via
> devres.  When a card object is created by this new function, it's
> released automatically at the device release.  It includes also the
> call of snd_card_free().
> 
> However, the story isn't that simple.  A caveat is that We have to
> call snd_card_new(), more specifically, the disconnection part, at
> very first of the whole resource release procedure.  This assures that
> the exposed devices are deleted and sync with the all accessing
> processes getting closed.
> 
> For achieving it, snd_card_register() adds a new devres action to
> trigger snd_card_free() automatically when the given card object is a
> "managed" one.  Since usually snd_card_register() is the last step of
> the initialization, this should work in most cases.
> 
> With all these tricks, some drivers can get rid of the whole the
> driver remove callback.
> 
> About a bit of implementation details: the patch adds two new flags to
> snd_card object, managed and releasing.  The former indicates that the
> object was created via snd_devm_card_new(), and the latter is used for
> avoiding the double-free of snd_card_free() calls.  Both flags are
> fairly internal and likely uninteresting to normal users.
> 
> Signed-off-by: Takashi Iwai <tiwai at suse.de>
> ---
>   include/sound/core.h |  5 +++
>   sound/core/init.c    | 95 ++++++++++++++++++++++++++++++++++++++++++--
>   2 files changed, 96 insertions(+), 4 deletions(-)

In my opinion, the new 'snd_devm_card_new()' is not good in hot-plug
scenario. It brings kernel oops for processes to touch released device
data relevant to target devices.

For example, for devices connected to each buses, some helper
functions are available to up/down reference count of 'struct device':
  - PCIe: pci_dev_get()/pci_dev_put()
  - USB: usb_get_intf()/usb_put_intf()
  - IEEE 1394: fw_unit_get()/fw_unit_put()

In hot-plug scenario, drivers need to increment the reference counter in
.probe() callback. In .remove/.disconnect callback, the reference
counter should be kept but just set disconnect state to sound
card/device instances. When .private_free callback of sound card device,
the reference is decremented. This is required to enable userspace
applications to handle disconnect processes and avoid kernel oops by
touching released device data related to the connected bus.

As a quick glance, existent drivers for devices on PCIe/USB are not
programmed with enough care of this point. It's prior to fix them for
your 'caveat'.

...but it's likely for me to get wrong understanding design of whole
existent driver in sound subsystem. I'm happy to receive your 
indications against my misunderstanding.

Regards

Takashi Sakamoto