Disallow taking two instances of the same mutex at the same time
[rust-lightning] / lightning / src / sync / debug_sync.rs
1 pub use ::alloc::sync::Arc;
2 use core::ops::{Deref, DerefMut};
3 use core::time::Duration;
4
5 use std::cell::RefCell;
6
7 use std::sync::atomic::{AtomicUsize, Ordering};
8 use std::sync::Mutex as StdMutex;
9 use std::sync::MutexGuard as StdMutexGuard;
10 use std::sync::RwLock as StdRwLock;
11 use std::sync::RwLockReadGuard as StdRwLockReadGuard;
12 use std::sync::RwLockWriteGuard as StdRwLockWriteGuard;
13 use std::sync::Condvar as StdCondvar;
14
15 use crate::prelude::HashMap;
16
17 use super::{LockTestExt, LockHeldState};
18
19 #[cfg(feature = "backtrace")]
20 use {crate::prelude::hash_map, backtrace::Backtrace, std::sync::Once};
21
22 #[cfg(not(feature = "backtrace"))]
23 struct Backtrace{}
24 #[cfg(not(feature = "backtrace"))]
25 impl Backtrace { fn new() -> Backtrace { Backtrace {} } }
26
27 pub type LockResult<Guard> = Result<Guard, ()>;
28
29 pub struct Condvar {
30         inner: StdCondvar,
31 }
32
33 impl Condvar {
34         pub fn new() -> Condvar {
35                 Condvar { inner: StdCondvar::new() }
36         }
37
38         pub fn wait<'a, T>(&'a self, guard: MutexGuard<'a, T>) -> LockResult<MutexGuard<'a, T>> {
39                 let mutex: &'a Mutex<T> = guard.mutex;
40                 self.inner.wait(guard.into_inner()).map(|lock| MutexGuard { mutex, lock }).map_err(|_| ())
41         }
42
43         #[allow(unused)]
44         pub fn wait_timeout<'a, T>(&'a self, guard: MutexGuard<'a, T>, dur: Duration) -> LockResult<(MutexGuard<'a, T>, ())> {
45                 let mutex = guard.mutex;
46                 self.inner.wait_timeout(guard.into_inner(), dur).map(|(lock, _)| (MutexGuard { mutex, lock }, ())).map_err(|_| ())
47         }
48
49         pub fn notify_all(&self) { self.inner.notify_all(); }
50 }
51
52 thread_local! {
53         /// We track the set of locks currently held by a reference to their `LockMetadata`
54         static LOCKS_HELD: RefCell<HashMap<u64, Arc<LockMetadata>>> = RefCell::new(HashMap::new());
55 }
56 static LOCK_IDX: AtomicUsize = AtomicUsize::new(0);
57
58 #[cfg(feature = "backtrace")]
59 static mut LOCKS: Option<StdMutex<HashMap<String, Arc<LockMetadata>>>> = None;
60 #[cfg(feature = "backtrace")]
61 static LOCKS_INIT: Once = Once::new();
62
63 /// Metadata about a single lock, by id, the set of things locked-before it, and the backtrace of
64 /// when the Mutex itself was constructed.
65 struct LockMetadata {
66         lock_idx: u64,
67         locked_before: StdMutex<HashMap<u64, LockDep>>,
68         _lock_construction_bt: Backtrace,
69 }
70
71 struct LockDep {
72         lock: Arc<LockMetadata>,
73         /// lockdep_trace is unused unless we're building with `backtrace`, so we mark it _
74         _lockdep_trace: Backtrace,
75 }
76
77 #[cfg(feature = "backtrace")]
78 fn get_construction_location(backtrace: &Backtrace) -> String {
79         // Find the first frame that is after `debug_sync` (or that is in our tests) and use
80         // that as the mutex construction site. Note that the first few frames may be in
81         // the `backtrace` crate, so we have to ignore those.
82         let sync_mutex_constr_regex = regex::Regex::new(r"lightning.*debug_sync").unwrap();
83         let mut found_debug_sync = false;
84         for frame in backtrace.frames() {
85                 for symbol in frame.symbols() {
86                         let symbol_name = symbol.name().unwrap().as_str().unwrap();
87                         if !sync_mutex_constr_regex.is_match(symbol_name) {
88                                 if found_debug_sync {
89                                         if let Some(col) = symbol.colno() {
90                                                 return format!("{}:{}:{}", symbol.filename().unwrap().display(), symbol.lineno().unwrap(), col);
91                                         } else {
92                                                 // Windows debug symbols don't support column numbers, so fall back to
93                                                 // line numbers only if no `colno` is available
94                                                 return format!("{}:{}", symbol.filename().unwrap().display(), symbol.lineno().unwrap());
95                                         }
96                                 }
97                         } else { found_debug_sync = true; }
98                 }
99         }
100         panic!("Couldn't find mutex construction callsite");
101 }
102
103 impl LockMetadata {
104         fn new() -> Arc<LockMetadata> {
105                 let backtrace = Backtrace::new();
106                 let lock_idx = LOCK_IDX.fetch_add(1, Ordering::Relaxed) as u64;
107
108                 let res = Arc::new(LockMetadata {
109                         locked_before: StdMutex::new(HashMap::new()),
110                         lock_idx,
111                         _lock_construction_bt: backtrace,
112                 });
113
114                 #[cfg(feature = "backtrace")]
115                 {
116                         let lock_constr_location = get_construction_location(&res._lock_construction_bt);
117                         LOCKS_INIT.call_once(|| { unsafe { LOCKS = Some(StdMutex::new(HashMap::new())); } });
118                         let mut locks = unsafe { LOCKS.as_ref() }.unwrap().lock().unwrap();
119                         match locks.entry(lock_constr_location) {
120                                 hash_map::Entry::Occupied(e) => return Arc::clone(e.get()),
121                                 hash_map::Entry::Vacant(e) => { e.insert(Arc::clone(&res)); },
122                         }
123                 }
124                 res
125         }
126
127         fn pre_lock(this: &Arc<LockMetadata>, _double_lock_self_allowed: bool) {
128                 LOCKS_HELD.with(|held| {
129                         // For each lock which is currently locked, check that no lock's locked-before
130                         // set includes the lock we're about to lock, which would imply a lockorder
131                         // inversion.
132                         for (locked_idx, locked) in held.borrow().iter() {
133                                 if *locked_idx == this.lock_idx {
134                                         // Note that with `feature = "backtrace"` set, we may be looking at different
135                                         // instances of the same lock. Still, doing so is quite risky, a total order
136                                         // must be maintained, and doing so across a set of otherwise-identical mutexes
137                                         // is fraught with issues.
138                                         #[cfg(feature = "backtrace")]
139                                         debug_assert!(_double_lock_self_allowed,
140                                                 "Tried to acquire a lock while it was held!\nLock constructed at {}",
141                                                 get_construction_location(&this._lock_construction_bt));
142                                         #[cfg(not(feature = "backtrace"))]
143                                         panic!("Tried to acquire a lock while it was held!");
144                                 }
145                         }
146                         for (locked_idx, locked) in held.borrow().iter() {
147                                 for (locked_dep_idx, _locked_dep) in locked.locked_before.lock().unwrap().iter() {
148                                         if *locked_dep_idx == this.lock_idx && *locked_dep_idx != locked.lock_idx {
149                                                 #[cfg(feature = "backtrace")]
150                                                 panic!("Tried to violate existing lockorder.\nMutex that should be locked after the current lock was created at the following backtrace.\nNote that to get a backtrace for the lockorder violation, you should set RUST_BACKTRACE=1\nLock being taken constructed at: {} ({}):\n{:?}\nLock constructed at: {} ({})\n{:?}\n\nLock dep created at:\n{:?}\n\n",
151                                                         get_construction_location(&this._lock_construction_bt), this.lock_idx, this._lock_construction_bt,
152                                                         get_construction_location(&locked._lock_construction_bt), locked.lock_idx, locked._lock_construction_bt,
153                                                         _locked_dep._lockdep_trace);
154                                                 #[cfg(not(feature = "backtrace"))]
155                                                 panic!("Tried to violate existing lockorder. Build with the backtrace feature for more info.");
156                                         }
157                                 }
158                                 // Insert any already-held locks in our locked-before set.
159                                 let mut locked_before = this.locked_before.lock().unwrap();
160                                 if !locked_before.contains_key(&locked.lock_idx) {
161                                         let lockdep = LockDep { lock: Arc::clone(locked), _lockdep_trace: Backtrace::new() };
162                                         locked_before.insert(lockdep.lock.lock_idx, lockdep);
163                                 }
164                         }
165                         held.borrow_mut().insert(this.lock_idx, Arc::clone(this));
166                 });
167         }
168
169         fn held_by_thread(this: &Arc<LockMetadata>) -> LockHeldState {
170                 let mut res = LockHeldState::NotHeldByThread;
171                 LOCKS_HELD.with(|held| {
172                         for (locked_idx, _locked) in held.borrow().iter() {
173                                 if *locked_idx == this.lock_idx {
174                                         res = LockHeldState::HeldByThread;
175                                 }
176                         }
177                 });
178                 res
179         }
180
181         fn try_locked(this: &Arc<LockMetadata>) {
182                 LOCKS_HELD.with(|held| {
183                         // Since a try-lock will simply fail if the lock is held already, we do not
184                         // consider try-locks to ever generate lockorder inversions. However, if a try-lock
185                         // succeeds, we do consider it to have created lockorder dependencies.
186                         let mut locked_before = this.locked_before.lock().unwrap();
187                         for (locked_idx, locked) in held.borrow().iter() {
188                                 if !locked_before.contains_key(locked_idx) {
189                                         let lockdep = LockDep { lock: Arc::clone(locked), _lockdep_trace: Backtrace::new() };
190                                         locked_before.insert(*locked_idx, lockdep);
191                                 }
192                         }
193                         held.borrow_mut().insert(this.lock_idx, Arc::clone(this));
194                 });
195         }
196 }
197
198 pub struct Mutex<T: Sized> {
199         inner: StdMutex<T>,
200         deps: Arc<LockMetadata>,
201 }
202
203 #[must_use = "if unused the Mutex will immediately unlock"]
204 pub struct MutexGuard<'a, T: Sized + 'a> {
205         mutex: &'a Mutex<T>,
206         lock: StdMutexGuard<'a, T>,
207 }
208
209 impl<'a, T: Sized> MutexGuard<'a, T> {
210         fn into_inner(self) -> StdMutexGuard<'a, T> {
211                 // Somewhat unclear why we cannot move out of self.lock, but doing so gets E0509.
212                 unsafe {
213                         let v: StdMutexGuard<'a, T> = std::ptr::read(&self.lock);
214                         std::mem::forget(self);
215                         v
216                 }
217         }
218 }
219
220 impl<T: Sized> Drop for MutexGuard<'_, T> {
221         fn drop(&mut self) {
222                 LOCKS_HELD.with(|held| {
223                         held.borrow_mut().remove(&self.mutex.deps.lock_idx);
224                 });
225         }
226 }
227
228 impl<T: Sized> Deref for MutexGuard<'_, T> {
229         type Target = T;
230
231         fn deref(&self) -> &T {
232                 &self.lock.deref()
233         }
234 }
235
236 impl<T: Sized> DerefMut for MutexGuard<'_, T> {
237         fn deref_mut(&mut self) -> &mut T {
238                 self.lock.deref_mut()
239         }
240 }
241
242 impl<T> Mutex<T> {
243         pub fn new(inner: T) -> Mutex<T> {
244                 Mutex { inner: StdMutex::new(inner), deps: LockMetadata::new() }
245         }
246
247         pub fn lock<'a>(&'a self) -> LockResult<MutexGuard<'a, T>> {
248                 LockMetadata::pre_lock(&self.deps, false);
249                 self.inner.lock().map(|lock| MutexGuard { mutex: self, lock }).map_err(|_| ())
250         }
251
252         pub fn try_lock<'a>(&'a self) -> LockResult<MutexGuard<'a, T>> {
253                 let res = self.inner.try_lock().map(|lock| MutexGuard { mutex: self, lock }).map_err(|_| ());
254                 if res.is_ok() {
255                         LockMetadata::try_locked(&self.deps);
256                 }
257                 res
258         }
259 }
260
261 impl<'a, T: 'a> LockTestExt<'a> for Mutex<T> {
262         #[inline]
263         fn held_by_thread(&self) -> LockHeldState {
264                 LockMetadata::held_by_thread(&self.deps)
265         }
266         type ExclLock = MutexGuard<'a, T>;
267         #[inline]
268         fn unsafe_well_ordered_double_lock_self(&'a self) -> MutexGuard<T> {
269                 LockMetadata::pre_lock(&self.deps, true);
270                 self.inner.lock().map(|lock| MutexGuard { mutex: self, lock }).unwrap()
271         }
272 }
273
274 pub struct RwLock<T: Sized> {
275         inner: StdRwLock<T>,
276         deps: Arc<LockMetadata>,
277 }
278
279 pub struct RwLockReadGuard<'a, T: Sized + 'a> {
280         lock: &'a RwLock<T>,
281         guard: StdRwLockReadGuard<'a, T>,
282 }
283
284 pub struct RwLockWriteGuard<'a, T: Sized + 'a> {
285         lock: &'a RwLock<T>,
286         guard: StdRwLockWriteGuard<'a, T>,
287 }
288
289 impl<T: Sized> Deref for RwLockReadGuard<'_, T> {
290         type Target = T;
291
292         fn deref(&self) -> &T {
293                 &self.guard.deref()
294         }
295 }
296
297 impl<T: Sized> Drop for RwLockReadGuard<'_, T> {
298         fn drop(&mut self) {
299                 LOCKS_HELD.with(|held| {
300                         held.borrow_mut().remove(&self.lock.deps.lock_idx);
301                 });
302         }
303 }
304
305 impl<T: Sized> Deref for RwLockWriteGuard<'_, T> {
306         type Target = T;
307
308         fn deref(&self) -> &T {
309                 &self.guard.deref()
310         }
311 }
312
313 impl<T: Sized> Drop for RwLockWriteGuard<'_, T> {
314         fn drop(&mut self) {
315                 LOCKS_HELD.with(|held| {
316                         held.borrow_mut().remove(&self.lock.deps.lock_idx);
317                 });
318         }
319 }
320
321 impl<T: Sized> DerefMut for RwLockWriteGuard<'_, T> {
322         fn deref_mut(&mut self) -> &mut T {
323                 self.guard.deref_mut()
324         }
325 }
326
327 impl<T> RwLock<T> {
328         pub fn new(inner: T) -> RwLock<T> {
329                 RwLock { inner: StdRwLock::new(inner), deps: LockMetadata::new() }
330         }
331
332         pub fn read<'a>(&'a self) -> LockResult<RwLockReadGuard<'a, T>> {
333                 // Note that while we could be taking a recursive read lock here, Rust's `RwLock` may
334                 // deadlock trying to take a second read lock if another thread is waiting on the write
335                 // lock. This behavior is platform dependent, but our in-tree `FairRwLock` guarantees
336                 // such a deadlock.
337                 LockMetadata::pre_lock(&self.deps, false);
338                 self.inner.read().map(|guard| RwLockReadGuard { lock: self, guard }).map_err(|_| ())
339         }
340
341         pub fn write<'a>(&'a self) -> LockResult<RwLockWriteGuard<'a, T>> {
342                 LockMetadata::pre_lock(&self.deps, false);
343                 self.inner.write().map(|guard| RwLockWriteGuard { lock: self, guard }).map_err(|_| ())
344         }
345
346         pub fn try_write<'a>(&'a self) -> LockResult<RwLockWriteGuard<'a, T>> {
347                 let res = self.inner.try_write().map(|guard| RwLockWriteGuard { lock: self, guard }).map_err(|_| ());
348                 if res.is_ok() {
349                         LockMetadata::try_locked(&self.deps);
350                 }
351                 res
352         }
353 }
354
355 impl<'a, T: 'a> LockTestExt<'a> for RwLock<T> {
356         #[inline]
357         fn held_by_thread(&self) -> LockHeldState {
358                 LockMetadata::held_by_thread(&self.deps)
359         }
360         type ExclLock = RwLockWriteGuard<'a, T>;
361         #[inline]
362         fn unsafe_well_ordered_double_lock_self(&'a self) -> RwLockWriteGuard<'a, T> {
363                 LockMetadata::pre_lock(&self.deps, true);
364                 self.inner.write().map(|guard| RwLockWriteGuard { lock: self, guard }).unwrap()
365         }
366 }
367
368 pub type FairRwLock<T> = RwLock<T>;