Series comparison

-[Qemu-devel] [PULL 00/11] Block patches
+[PULL 0/1] Block patches
-The following changes since commit 19b599f7664b2ebfd0f405fb79c14dd241557452:
+The following changes since commit 871af84dd599fab68c8ed414d9ecbdb2bcfc5801:
-  Merge remote-tracking branch 'remotes/armbru/tags/pull-error-2018-08-27-v2' into staging (2018-08-27 16:44:20 +0100)
+  Merge tag 'for-upstream' of https://gitlab.com/bonzini/qemu into staging (2025-01-29 09:51:03 -0500)
 are available in the Git repository at:
-  https://git.xanclic.moe/XanClic/qemu.git tags/pull-block-2018-08-31
+  https://gitlab.com/stefanha/qemu.git tags/block-pull-request
-for you to fetch changes up to 40954cc7831c4f95f9ce6402ae3d6761f44f31ff:
+for you to fetch changes up to 58607752d173438994d28dea7e2c2587726663e6:
-  jobs: remove job_defer_to_main_loop (2018-08-31 16:11:27 +0200)
+  parallels: fix ext_off assertion failure due to overflow (2025-01-30 15:22:28 -0500)
 ----------------------------------------------------------------
-Block patches:
+Pull request
 - (Block) job exit refactoring, part 1
   (removing job_defer_to_main_loop())
 - Locking fix for the file-posix block driver
 - test-bdrv-drain leak fix
 ----------------------------------------------------------------
-Fam Zheng (1):
-  file-posix: Skip effectiveless OFD lock operations
-John Snow (9):
+Denis Rastyogin (1):
-  jobs: change start callback to run callback
+  parallels: fix ext_off assertion failure due to overflow
   jobs: canonize Error object
   jobs: add exit shim
   block/commit: utilize job_exit shim
   block/mirror: utilize job_exit shim
   jobs: utilize job_exit shim
   block/backup: make function variables consistently named
   jobs: remove ret argument to job_completed; privatize it
   jobs: remove job_defer_to_main_loop
-Marc-André Lureau (1):
+ block/parallels.c | 4 ++++
-  tests: fix bdrv-drain leak
+file changed, 4 insertions(+)
  include/qemu/job.h        | 70 ++++++++++++++++-----------------
  block/backup.c            | 81 ++++++++++++++++-----------------------
  block/commit.c            | 29 +++++---------
  block/create.c            | 19 +++------
  block/file-posix.c        | 41 +++++++++++++++-----
  block/mirror.c            | 39 ++++++++-----------
  block/stream.c            | 29 ++++++--------
  job-qmp.c                 |  5 ++-
  job.c                     | 73 ++++++++++++-----------------------
  tests/test-bdrv-drain.c   | 14 +++----
  tests/test-blockjob-txn.c | 25 +++++-------
  tests/test-blockjob.c     | 17 ++++----
  trace-events              |  2 +-
 files changed, 192 insertions(+), 252 deletions(-)
 --
-.17.1
+.48.1

-[Qemu-devel] [PULL 01/11] file-posix: Skip effectiveless OFD lock operations
+[PULL 1/1] parallels: fix ext_off assertion failure due to overflow
-From: Fam Zheng <famz@redhat.com>
+From: Denis Rastyogin <gerben@altlinux.org>
-If we know we've already locked the bytes, don't do it again; similarly
+This error was discovered by fuzzing qemu-img.
 don't unlock a byte if we haven't locked it. This doesn't change the
 behavior, but fixes a corner case explained below.
-Libvirt had an error handling bug that an image can get its (ownership,
+When ph.ext_off has a sufficiently large value, the operation
-file mode, SELinux) permissions changed (RHBZ 1584982) by mistake behind
+le64_to_cpu(ph.ext_off) << BDRV_SECTOR_BITS in
-QEMU. Specifically, an image in use by Libvirt VM has:
+parallels_read_format_extension() can cause an overflow in int64_t.
 This overflow triggers the assert(ext_off > 0)
 check in block/parallels-ext.c: parallels_read_format_extension(),
 leading to a crash.
-    $ ls -lhZ b.img
+This commit adds a check to prevent overflow when shifting ph.ext_off
-    -rw-r--r--. qemu qemu system_u:object_r:svirt_image_t:s0:c600,c690 b.img
+by BDRV_SECTOR_BITS, ensuring that the value remains within a valid range.
-Trying to attach it a second time won't work because of image locking.
+Reported-by: Leonid Reviakin <L.reviakin@fobos-nt.ru>
-And after the error, it becomes:
+Signed-off-by: Denis Rastyogin <gerben@altlinux.org>
 Reviewed-by: Denis V. Lunev <den@openvz.org>
 Message-ID: <20241212104212.513947-2-gerben@altlinux.org>
 Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
 ---
  block/parallels.c | 4 ++++
 file changed, 4 insertions(+)
-    $ ls -lhZ b.img
+diff --git a/block/parallels.c b/block/parallels.c
     -rw-r--r--. root root system_u:object_r:virt_image_t:s0 b.img
 Then, we won't be able to do OFD lock operations with the existing fd.
 In other words, the code such as in blk_detach_dev:
     blk_set_perm(blk, 0, BLK_PERM_ALL, &error_abort);
 can abort() QEMU, out of environmental changes.
 This patch is an easy fix to this and the change is regardlessly
 reasonable, so do it.
 Signed-off-by: Fam Zheng <famz@redhat.com>
 Signed-off-by: Kevin Wolf <kwolf@redhat.com>
 ---
  block/file-posix.c | 41 +++++++++++++++++++++++++++++++----------
 file changed, 31 insertions(+), 10 deletions(-)
 diff --git a/block/file-posix.c b/block/file-posix.c
 index XXXXXXX..XXXXXXX 100644
---- a/block/file-posix.c
+--- a/block/parallels.c
-+++ b/block/file-posix.c
++++ b/block/parallels.c
-@@ -XXX,XX +XXX,XX @@ typedef enum {
+@@ -XXX,XX +XXX,XX @@ static int parallels_open(BlockDriverState *bs, QDict *options, int flags,
-  * file; if @unlock == true, also unlock the unneeded bytes.
+         error_setg(errp, "Catalog too large");
-  * @shared_perm_lock_bits is the mask of all permissions that are NOT shared.
+         return -EFBIG;
-  */
+     }
--static int raw_apply_lock_bytes(int fd,
++    if (le64_to_cpu(ph.ext_off) >= (INT64_MAX >> BDRV_SECTOR_BITS)) {
-+static int raw_apply_lock_bytes(BDRVRawState *s, int fd,
++        error_setg(errp, "Invalid image: Too big offset");
-                                 uint64_t perm_lock_bits,
++        return -EFBIG;
                                  uint64_t shared_perm_lock_bits,
                                  bool unlock, Error **errp)
  {
      int ret;
      int i;
 +    uint64_t locked_perm, locked_shared_perm;
 +
 +    if (s) {
 +        locked_perm = s->perm;
 +        locked_shared_perm = ~s->shared_perm & BLK_PERM_ALL;
 +    } else {
 +        /*
 +         * We don't have the previous bits, just lock/unlock for each of the
 +         * requested bits.
 +         */
 +        if (unlock) {
 +            locked_perm = BLK_PERM_ALL;
 +            locked_shared_perm = BLK_PERM_ALL;
 +        } else {
 +            locked_perm = 0;
 +            locked_shared_perm = 0;
 +        }
 +    }
-     PERM_FOREACH(i) {
+     size = bat_entry_off(s->bat_size);
-         int off = RAW_LOCK_PERM_BASE + i;
+     s->header_size = ROUND_UP(size, bdrv_opt_mem_align(bs->file->bs));
 -        if (perm_lock_bits & (1ULL << i)) {
 +        uint64_t bit = (1ULL << i);
 +        if ((perm_lock_bits & bit) && !(locked_perm & bit)) {
              ret = qemu_lock_fd(fd, off, 1, false);
              if (ret) {
                  error_setg(errp, "Failed to lock byte %d", off);
                  return ret;
              }
 -        } else if (unlock) {
 +        } else if (unlock && (locked_perm & bit) && !(perm_lock_bits & bit)) {
              ret = qemu_unlock_fd(fd, off, 1);
              if (ret) {
                  error_setg(errp, "Failed to unlock byte %d", off);
@@ -XXX,XX +XXX,XX @@ static int raw_apply_lock_bytes(int fd,
      }
      PERM_FOREACH(i) {
          int off = RAW_LOCK_SHARED_BASE + i;
 -        if (shared_perm_lock_bits & (1ULL << i)) {
 +        uint64_t bit = (1ULL << i);
 +        if ((shared_perm_lock_bits & bit) && !(locked_shared_perm & bit)) {
              ret = qemu_lock_fd(fd, off, 1, false);
              if (ret) {
                  error_setg(errp, "Failed to lock byte %d", off);
                  return ret;
              }
 -        } else if (unlock) {
 +        } else if (unlock && (locked_shared_perm & bit) &&
 +                   !(shared_perm_lock_bits & bit)) {
              ret = qemu_unlock_fd(fd, off, 1);
              if (ret) {
                  error_setg(errp, "Failed to unlock byte %d", off);
@@ -XXX,XX +XXX,XX @@ static int raw_handle_perm_lock(BlockDriverState *bs,
      switch (op) {
      case RAW_PL_PREPARE:
 -        ret = raw_apply_lock_bytes(s->lock_fd, s->perm | new_perm,
 +        ret = raw_apply_lock_bytes(s, s->lock_fd, s->perm | new_perm,
                                     ~s->shared_perm | ~new_shared,
                                     false, errp);
          if (!ret) {
@@ -XXX,XX +XXX,XX @@ static int raw_handle_perm_lock(BlockDriverState *bs,
          op = RAW_PL_ABORT;
          /* fall through to unlock bytes. */
      case RAW_PL_ABORT:
 -        raw_apply_lock_bytes(s->lock_fd, s->perm, ~s->shared_perm,
 +        raw_apply_lock_bytes(s, s->lock_fd, s->perm, ~s->shared_perm,
                               true, &local_err);
          if (local_err) {
              /* Theoretically the above call only unlocks bytes and it cannot
@@ -XXX,XX +XXX,XX @@ static int raw_handle_perm_lock(BlockDriverState *bs,
          }
          break;
      case RAW_PL_COMMIT:
 -        raw_apply_lock_bytes(s->lock_fd, new_perm, ~new_shared,
 +        raw_apply_lock_bytes(s, s->lock_fd, new_perm, ~new_shared,
                               true, &local_err);
          if (local_err) {
              /* Theoretically the above call only unlocks bytes and it cannot
@@ -XXX,XX +XXX,XX @@ raw_co_create(BlockdevCreateOptions *options, Error **errp)
      shared = BLK_PERM_ALL & ~BLK_PERM_RESIZE;
      /* Step one: Take locks */
 -    result = raw_apply_lock_bytes(fd, perm, ~shared, false, errp);
 +    result = raw_apply_lock_bytes(NULL, fd, perm, ~shared, false, errp);
      if (result < 0) {
          goto out_close;
      }
@@ -XXX,XX +XXX,XX @@ raw_co_create(BlockdevCreateOptions *options, Error **errp)
      }
  out_unlock:
 -    raw_apply_lock_bytes(fd, 0, 0, true, &local_err);
 +    raw_apply_lock_bytes(NULL, fd, 0, 0, true, &local_err);
      if (local_err) {
          /* The above call should not fail, and if it does, that does
           * not mean the whole creation operation has failed.  So
 --
-.17.1
+.48.1

-[Qemu-devel] [PULL 02/11] tests: fix bdrv-drain leak
+Deleted patch
-From: Marc-André Lureau <marcandre.lureau@redhat.com>
-Spotted by ASAN:
-=================================================================
-==5378==ERROR: LeakSanitizer: detected memory leaks
-Direct leak of 65536 byte(s) in 1 object(s) allocated from:
-    #0 0x7f788f83bc48 in malloc (/lib64/libasan.so.5+0xeec48)
-    #1 0x7f788c9923c5 in g_malloc (/lib64/libglib-2.0.so.0+0x523c5)
-    #2 0x5622a1fe37bc in coroutine_trampoline /home/elmarco/src/qq/util/coroutine-ucontext.c:116
-    #3 0x7f788a15d75f in __correctly_grouped_prefixwc (/lib64/libc.so.6+0x4c75f)
-(Broken in commit 4c8158e359d.)
-Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
-Message-id: 20180809114417.28718-3-marcandre.lureau@redhat.com
-Signed-off-by: Max Reitz <mreitz@redhat.com>
----
- tests/test-bdrv-drain.c | 1 +
-file changed, 1 insertion(+)
-diff --git a/tests/test-bdrv-drain.c b/tests/test-bdrv-drain.c
-index XXXXXXX..XXXXXXX 100644
---- a/tests/test-bdrv-drain.c
-+++ b/tests/test-bdrv-drain.c
-@@ -XXX,XX +XXX,XX @@ static void coroutine_fn test_co_delete_by_drain(void *opaque)
-     }
-     dbdd->done = true;
-+    g_free(buffer);
- }
- /**
---
-.17.1

-[Qemu-devel] [PULL 03/11] jobs: change start callback to run callback
+Deleted patch
-From: John Snow <jsnow@redhat.com>
-Presently we codify the entry point for a job as the "start" callback,
-but a more apt name would be "run" to clarify the idea that when this
-function returns we consider the job to have "finished," except for
-any cleanup which occurs in separate callbacks later.
-As part of this clarification, change the signature to include an error
-object and a return code. The error ptr is not yet used, and the return
-code while captured, will be overwritten by actions in the job_completed
-function.
-Signed-off-by: John Snow <jsnow@redhat.com>
-Reviewed-by: Max Reitz <mreitz@redhat.com>
-Message-id: 20180830015734.19765-2-jsnow@redhat.com
-Reviewed-by: Jeff Cody <jcody@redhat.com>
-Signed-off-by: Max Reitz <mreitz@redhat.com>
----
- include/qemu/job.h        |  2 +-
- block/backup.c            |  7 ++++---
- block/commit.c            |  7 ++++---
- block/create.c            |  8 +++++---
- block/mirror.c            | 10 ++++++----
- block/stream.c            |  7 ++++---
- job.c                     |  6 +++---
- tests/test-bdrv-drain.c   |  7 ++++---
- tests/test-blockjob-txn.c | 16 ++++++++--------
- tests/test-blockjob.c     |  7 ++++---
-files changed, 43 insertions(+), 34 deletions(-)
-diff --git a/include/qemu/job.h b/include/qemu/job.h
-index XXXXXXX..XXXXXXX 100644
---- a/include/qemu/job.h
-+++ b/include/qemu/job.h
-@@ -XXX,XX +XXX,XX @@ struct JobDriver {
-     JobType job_type;
-     /** Mandatory: Entrypoint for the Coroutine. */
--    CoroutineEntry *start;
-+    int coroutine_fn (*run)(Job *job, Error **errp);
-     /**
-      * If the callback is not NULL, it will be invoked when the job transitions
-diff --git a/block/backup.c b/block/backup.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/backup.c
-+++ b/block/backup.c
-@@ -XXX,XX +XXX,XX @@ static void backup_incremental_init_copy_bitmap(BackupBlockJob *job)
-     bdrv_dirty_iter_free(dbi);
- }
--static void coroutine_fn backup_run(void *opaque)
-+static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
- {
--    BackupBlockJob *job = opaque;
-+    BackupBlockJob *job = container_of(opaque_job, BackupBlockJob, common.job);
-     BackupCompleteData *data;
-     BlockDriverState *bs = blk_bs(job->common.blk);
-     int64_t offset, nb_clusters;
-@@ -XXX,XX +XXX,XX @@ static void coroutine_fn backup_run(void *opaque)
-     data = g_malloc(sizeof(*data));
-     data->ret = ret;
-     job_defer_to_main_loop(&job->common.job, backup_complete, data);
-+    return ret;
- }
- static const BlockJobDriver backup_job_driver = {
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver backup_job_driver = {
-         .free                   = block_job_free,
-         .user_resume            = block_job_user_resume,
-         .drain                  = block_job_drain,
--        .start                  = backup_run,
-+        .run                    = backup_run,
-         .commit                 = backup_commit,
-         .abort                  = backup_abort,
-         .clean                  = backup_clean,
-diff --git a/block/commit.c b/block/commit.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/commit.c
-+++ b/block/commit.c
-@@ -XXX,XX +XXX,XX @@ static void commit_complete(Job *job, void *opaque)
-     bdrv_unref(top);
- }
--static void coroutine_fn commit_run(void *opaque)
-+static int coroutine_fn commit_run(Job *job, Error **errp)
- {
--    CommitBlockJob *s = opaque;
-+    CommitBlockJob *s = container_of(job, CommitBlockJob, common.job);
-     CommitCompleteData *data;
-     int64_t offset;
-     uint64_t delay_ns = 0;
-@@ -XXX,XX +XXX,XX @@ out:
-     data = g_malloc(sizeof(*data));
-     data->ret = ret;
-     job_defer_to_main_loop(&s->common.job, commit_complete, data);
-+    return ret;
- }
- static const BlockJobDriver commit_job_driver = {
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver commit_job_driver = {
-         .free          = block_job_free,
-         .user_resume   = block_job_user_resume,
-         .drain         = block_job_drain,
--        .start         = commit_run,
-+        .run           = commit_run,
-     },
- };
-diff --git a/block/create.c b/block/create.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/create.c
-+++ b/block/create.c
-@@ -XXX,XX +XXX,XX @@ static void blockdev_create_complete(Job *job, void *opaque)
-     job_completed(job, s->ret, s->err);
- }
--static void coroutine_fn blockdev_create_run(void *opaque)
-+static int coroutine_fn blockdev_create_run(Job *job, Error **errp)
- {
--    BlockdevCreateJob *s = opaque;
-+    BlockdevCreateJob *s = container_of(job, BlockdevCreateJob, common);
-     job_progress_set_remaining(&s->common, 1);
-     s->ret = s->drv->bdrv_co_create(s->opts, &s->err);
-@@ -XXX,XX +XXX,XX @@ static void coroutine_fn blockdev_create_run(void *opaque)
-     qapi_free_BlockdevCreateOptions(s->opts);
-     job_defer_to_main_loop(&s->common, blockdev_create_complete, NULL);
-+
-+    return s->ret;
- }
- static const JobDriver blockdev_create_job_driver = {
-     .instance_size = sizeof(BlockdevCreateJob),
-     .job_type      = JOB_TYPE_CREATE,
--    .start         = blockdev_create_run,
-+    .run           = blockdev_create_run,
- };
- void qmp_blockdev_create(const char *job_id, BlockdevCreateOptions *options,
-diff --git a/block/mirror.c b/block/mirror.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/mirror.c
-+++ b/block/mirror.c
-@@ -XXX,XX +XXX,XX @@ static int mirror_flush(MirrorBlockJob *s)
-     return ret;
- }
--static void coroutine_fn mirror_run(void *opaque)
-+static int coroutine_fn mirror_run(Job *job, Error **errp)
- {
--    MirrorBlockJob *s = opaque;
-+    MirrorBlockJob *s = container_of(job, MirrorBlockJob, common.job);
-     MirrorExitData *data;
-     BlockDriverState *bs = s->mirror_top_bs->backing->bs;
-     BlockDriverState *target_bs = blk_bs(s->target);
-@@ -XXX,XX +XXX,XX @@ immediate_exit:
-     if (need_drain) {
-         bdrv_drained_begin(bs);
-     }
-+
-     job_defer_to_main_loop(&s->common.job, mirror_exit, data);
-+    return ret;
- }
- static void mirror_complete(Job *job, Error **errp)
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver mirror_job_driver = {
-         .free                   = block_job_free,
-         .user_resume            = block_job_user_resume,
-         .drain                  = block_job_drain,
--        .start                  = mirror_run,
-+        .run                    = mirror_run,
-         .pause                  = mirror_pause,
-         .complete               = mirror_complete,
-     },
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver commit_active_job_driver = {
-         .free                   = block_job_free,
-         .user_resume            = block_job_user_resume,
-         .drain                  = block_job_drain,
--        .start                  = mirror_run,
-+        .run                    = mirror_run,
-         .pause                  = mirror_pause,
-         .complete               = mirror_complete,
-     },
-diff --git a/block/stream.c b/block/stream.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/stream.c
-+++ b/block/stream.c
-@@ -XXX,XX +XXX,XX @@ out:
-     g_free(data);
- }
--static void coroutine_fn stream_run(void *opaque)
-+static int coroutine_fn stream_run(Job *job, Error **errp)
- {
--    StreamBlockJob *s = opaque;
-+    StreamBlockJob *s = container_of(job, StreamBlockJob, common.job);
-     StreamCompleteData *data;
-     BlockBackend *blk = s->common.blk;
-     BlockDriverState *bs = blk_bs(blk);
-@@ -XXX,XX +XXX,XX @@ out:
-     data = g_malloc(sizeof(*data));
-     data->ret = ret;
-     job_defer_to_main_loop(&s->common.job, stream_complete, data);
-+    return ret;
- }
- static const BlockJobDriver stream_job_driver = {
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver stream_job_driver = {
-         .instance_size = sizeof(StreamBlockJob),
-         .job_type      = JOB_TYPE_STREAM,
-         .free          = block_job_free,
--        .start         = stream_run,
-+        .run           = stream_run,
-         .user_resume   = block_job_user_resume,
-         .drain         = block_job_drain,
-     },
-diff --git a/job.c b/job.c
-index XXXXXXX..XXXXXXX 100644
---- a/job.c
-+++ b/job.c
-@@ -XXX,XX +XXX,XX @@ static void coroutine_fn job_co_entry(void *opaque)
- {
-     Job *job = opaque;
--    assert(job && job->driver && job->driver->start);
-+    assert(job && job->driver && job->driver->run);
-     job_pause_point(job);
--    job->driver->start(job);
-+    job->ret = job->driver->run(job, NULL);
- }
- void job_start(Job *job)
- {
-     assert(job && !job_started(job) && job->paused &&
--           job->driver && job->driver->start);
-+           job->driver && job->driver->run);
-     job->co = qemu_coroutine_create(job_co_entry, job);
-     job->pause_count--;
-     job->busy = true;
-diff --git a/tests/test-bdrv-drain.c b/tests/test-bdrv-drain.c
-index XXXXXXX..XXXXXXX 100644
---- a/tests/test-bdrv-drain.c
-+++ b/tests/test-bdrv-drain.c
-@@ -XXX,XX +XXX,XX @@ static void test_job_completed(Job *job, void *opaque)
-     job_completed(job, 0, NULL);
- }
--static void coroutine_fn test_job_start(void *opaque)
-+static int coroutine_fn test_job_run(Job *job, Error **errp)
- {
--    TestBlockJob *s = opaque;
-+    TestBlockJob *s = container_of(job, TestBlockJob, common.job);
-     job_transition_to_ready(&s->common.job);
-     while (!s->should_complete) {
-@@ -XXX,XX +XXX,XX @@ static void coroutine_fn test_job_start(void *opaque)
-     }
-     job_defer_to_main_loop(&s->common.job, test_job_completed, NULL);
-+    return 0;
- }
- static void test_job_complete(Job *job, Error **errp)
-@@ -XXX,XX +XXX,XX @@ BlockJobDriver test_job_driver = {
-         .free           = block_job_free,
-         .user_resume    = block_job_user_resume,
-         .drain          = block_job_drain,
--        .start          = test_job_start,
-+        .run            = test_job_run,
-         .complete       = test_job_complete,
-     },
- };
-diff --git a/tests/test-blockjob-txn.c b/tests/test-blockjob-txn.c
-index XXXXXXX..XXXXXXX 100644
---- a/tests/test-blockjob-txn.c
-+++ b/tests/test-blockjob-txn.c
-@@ -XXX,XX +XXX,XX @@ static void test_block_job_complete(Job *job, void *opaque)
-     bdrv_unref(bs);
- }
--static void coroutine_fn test_block_job_run(void *opaque)
-+static int coroutine_fn test_block_job_run(Job *job, Error **errp)
- {
--    TestBlockJob *s = opaque;
--    BlockJob *job = &s->common;
-+    TestBlockJob *s = container_of(job, TestBlockJob, common.job);
-     while (s->iterations--) {
-         if (s->use_timer) {
--            job_sleep_ns(&job->job, 0);
-+            job_sleep_ns(job, 0);
-         } else {
--            job_yield(&job->job);
-+            job_yield(job);
-         }
--        if (job_is_cancelled(&job->job)) {
-+        if (job_is_cancelled(job)) {
-             break;
-         }
-     }
--    job_defer_to_main_loop(&job->job, test_block_job_complete,
-+    job_defer_to_main_loop(job, test_block_job_complete,
-                            (void *)(intptr_t)s->rc);
-+    return s->rc;
- }
- typedef struct {
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver test_block_job_driver = {
-         .free          = block_job_free,
-         .user_resume   = block_job_user_resume,
-         .drain         = block_job_drain,
--        .start         = test_block_job_run,
-+        .run           = test_block_job_run,
-     },
- };
-diff --git a/tests/test-blockjob.c b/tests/test-blockjob.c
-index XXXXXXX..XXXXXXX 100644
---- a/tests/test-blockjob.c
-+++ b/tests/test-blockjob.c
-@@ -XXX,XX +XXX,XX @@ static void cancel_job_complete(Job *job, Error **errp)
-     s->should_complete = true;
- }
--static void coroutine_fn cancel_job_start(void *opaque)
-+static int coroutine_fn cancel_job_run(Job *job, Error **errp)
- {
--    CancelJob *s = opaque;
-+    CancelJob *s = container_of(job, CancelJob, common.job);
-     while (!s->should_complete) {
-         if (job_is_cancelled(&s->common.job)) {
-@@ -XXX,XX +XXX,XX @@ static void coroutine_fn cancel_job_start(void *opaque)
-  defer:
-     job_defer_to_main_loop(&s->common.job, cancel_job_completed, s);
-+    return 0;
- }
- static const BlockJobDriver test_cancel_driver = {
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver test_cancel_driver = {
-         .free          = block_job_free,
-         .user_resume   = block_job_user_resume,
-         .drain         = block_job_drain,
--        .start         = cancel_job_start,
-+        .run           = cancel_job_run,
-         .complete      = cancel_job_complete,
-     },
- };
---
-.17.1

-[Qemu-devel] [PULL 04/11] jobs: canonize Error object
+Deleted patch
-From: John Snow <jsnow@redhat.com>
-Jobs presently use both an Error object in the case of the create job,
-and char strings in the case of generic errors elsewhere.
-Unify the two paths as just j->err, and remove the extra argument from
-job_completed. The integer error code for job_completed is kept for now,
-to be removed shortly in a separate patch.
-Signed-off-by: John Snow <jsnow@redhat.com>
-Message-id: 20180830015734.19765-3-jsnow@redhat.com
-[mreitz: Dropped a superfluous g_strdup()]
-Reviewed-by: Eric Blake <eblake@redhat.com>
-Signed-off-by: Max Reitz <mreitz@redhat.com>
----
- include/qemu/job.h        | 14 ++++++++------
- block/backup.c            |  2 +-
- block/commit.c            |  2 +-
- block/create.c            |  5 ++---
- block/mirror.c            |  2 +-
- block/stream.c            |  2 +-
- job-qmp.c                 |  5 +++--
- job.c                     | 18 ++++++------------
- tests/test-bdrv-drain.c   |  2 +-
- tests/test-blockjob-txn.c |  2 +-
- tests/test-blockjob.c     |  2 +-
-files changed, 26 insertions(+), 30 deletions(-)
-diff --git a/include/qemu/job.h b/include/qemu/job.h
-index XXXXXXX..XXXXXXX 100644
---- a/include/qemu/job.h
-+++ b/include/qemu/job.h
-@@ -XXX,XX +XXX,XX @@ typedef struct Job {
-     /** Estimated progress_current value at the completion of the job */
-     int64_t progress_total;
--    /** Error string for a failed job (NULL if, and only if, job->ret == 0) */
--    char *error;
--
-     /** ret code passed to job_completed. */
-     int ret;
-+    /**
-+     * Error object for a failed job.
-+     * If job->ret is nonzero and an error object was not set, it will be set
-+     * to strerror(-job->ret) during job_completed.
-+     */
-+    Error *err;
-+
-     /** The completion function that will be called when the job completes.  */
-     BlockCompletionFunc *cb;
-@@ -XXX,XX +XXX,XX @@ void job_transition_to_ready(Job *job);
- /**
-  * @job: The job being completed.
-  * @ret: The status code.
-- * @error: The error message for a failing job (only with @ret < 0). If @ret is
-- *         negative, but NULL is given for @error, strerror() is used.
-  *
-  * Marks @job as completed. If @ret is non-zero, the job transaction it is part
-  * of is aborted. If @ret is zero, the job moves into the WAITING state. If it
-  * is the last job to complete in its transaction, all jobs in the transaction
-  * move from WAITING to PENDING.
-  */
--void job_completed(Job *job, int ret, Error *error);
-+void job_completed(Job *job, int ret);
- /** Asynchronously complete the specified @job. */
- void job_complete(Job *job, Error **errp);
-diff --git a/block/backup.c b/block/backup.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/backup.c
-+++ b/block/backup.c
-@@ -XXX,XX +XXX,XX @@ static void backup_complete(Job *job, void *opaque)
- {
-     BackupCompleteData *data = opaque;
--    job_completed(job, data->ret, NULL);
-+    job_completed(job, data->ret);
-     g_free(data);
- }
-diff --git a/block/commit.c b/block/commit.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/commit.c
-+++ b/block/commit.c
-@@ -XXX,XX +XXX,XX @@ static void commit_complete(Job *job, void *opaque)
-      * bdrv_set_backing_hd() to fail. */
-     block_job_remove_all_bdrv(bjob);
--    job_completed(job, ret, NULL);
-+    job_completed(job, ret);
-     g_free(data);
-     /* If bdrv_drop_intermediate() didn't already do that, remove the commit
-diff --git a/block/create.c b/block/create.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/create.c
-+++ b/block/create.c
-@@ -XXX,XX +XXX,XX @@ typedef struct BlockdevCreateJob {
-     BlockDriver *drv;
-     BlockdevCreateOptions *opts;
-     int ret;
--    Error *err;
- } BlockdevCreateJob;
- static void blockdev_create_complete(Job *job, void *opaque)
- {
-     BlockdevCreateJob *s = container_of(job, BlockdevCreateJob, common);
--    job_completed(job, s->ret, s->err);
-+    job_completed(job, s->ret);
- }
- static int coroutine_fn blockdev_create_run(Job *job, Error **errp)
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn blockdev_create_run(Job *job, Error **errp)
-     BlockdevCreateJob *s = container_of(job, BlockdevCreateJob, common);
-     job_progress_set_remaining(&s->common, 1);
--    s->ret = s->drv->bdrv_co_create(s->opts, &s->err);
-+    s->ret = s->drv->bdrv_co_create(s->opts, errp);
-     job_progress_update(&s->common, 1);
-     qapi_free_BlockdevCreateOptions(s->opts);
-diff --git a/block/mirror.c b/block/mirror.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/mirror.c
-+++ b/block/mirror.c
-@@ -XXX,XX +XXX,XX @@ static void mirror_exit(Job *job, void *opaque)
-     blk_insert_bs(bjob->blk, mirror_top_bs, &error_abort);
-     bs_opaque->job = NULL;
--    job_completed(job, data->ret, NULL);
-+    job_completed(job, data->ret);
-     g_free(data);
-     bdrv_drained_end(src);
-diff --git a/block/stream.c b/block/stream.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/stream.c
-+++ b/block/stream.c
-@@ -XXX,XX +XXX,XX @@ out:
-     }
-     g_free(s->backing_file_str);
--    job_completed(job, data->ret, NULL);
-+    job_completed(job, data->ret);
-     g_free(data);
- }
-diff --git a/job-qmp.c b/job-qmp.c
-index XXXXXXX..XXXXXXX 100644
---- a/job-qmp.c
-+++ b/job-qmp.c
-@@ -XXX,XX +XXX,XX @@ static JobInfo *job_query_single(Job *job, Error **errp)
-         .status             = job->status,
-         .current_progress   = job->progress_current,
-         .total_progress     = job->progress_total,
--        .has_error          = !!job->error,
--        .error              = g_strdup(job->error),
-+        .has_error          = !!job->err,
-+        .error              = job->err ? \
-+                              g_strdup(error_get_pretty(job->err)) : NULL,
-     };
-     return info;
-diff --git a/job.c b/job.c
-index XXXXXXX..XXXXXXX 100644
---- a/job.c
-+++ b/job.c
-@@ -XXX,XX +XXX,XX @@ void job_unref(Job *job)
-         QLIST_REMOVE(job, job_list);
--        g_free(job->error);
-+        error_free(job->err);
-         g_free(job->id);
-         g_free(job);
-     }
-@@ -XXX,XX +XXX,XX @@ static void coroutine_fn job_co_entry(void *opaque)
-     assert(job && job->driver && job->driver->run);
-     job_pause_point(job);
--    job->ret = job->driver->run(job, NULL);
-+    job->ret = job->driver->run(job, &job->err);
- }
-@@ -XXX,XX +XXX,XX @@ static void job_update_rc(Job *job)
-         job->ret = -ECANCELED;
-     }
-     if (job->ret) {
--        if (!job->error) {
--            job->error = g_strdup(strerror(-job->ret));
-+        if (!job->err) {
-+            error_setg(&job->err, "%s", strerror(-job->ret));
-         }
-         job_state_transition(job, JOB_STATUS_ABORTING);
-     }
-@@ -XXX,XX +XXX,XX @@ static void job_completed_txn_success(Job *job)
-     }
- }
--void job_completed(Job *job, int ret, Error *error)
-+void job_completed(Job *job, int ret)
- {
-     assert(job && job->txn && !job_is_completed(job));
-     job->ret = ret;
--    if (error) {
--        assert(job->ret < 0);
--        job->error = g_strdup(error_get_pretty(error));
--        error_free(error);
--    }
--
-     job_update_rc(job);
-     trace_job_completed(job, ret, job->ret);
-     if (job->ret) {
-@@ -XXX,XX +XXX,XX @@ void job_cancel(Job *job, bool force)
-     }
-     job_cancel_async(job, force);
-     if (!job_started(job)) {
--        job_completed(job, -ECANCELED, NULL);
-+        job_completed(job, -ECANCELED);
-     } else if (job->deferred_to_main_loop) {
-         job_completed_txn_abort(job);
-     } else {
-diff --git a/tests/test-bdrv-drain.c b/tests/test-bdrv-drain.c
-index XXXXXXX..XXXXXXX 100644
---- a/tests/test-bdrv-drain.c
-+++ b/tests/test-bdrv-drain.c
-@@ -XXX,XX +XXX,XX @@ typedef struct TestBlockJob {
- static void test_job_completed(Job *job, void *opaque)
- {
--    job_completed(job, 0, NULL);
-+    job_completed(job, 0);
- }
- static int coroutine_fn test_job_run(Job *job, Error **errp)
-diff --git a/tests/test-blockjob-txn.c b/tests/test-blockjob-txn.c
-index XXXXXXX..XXXXXXX 100644
---- a/tests/test-blockjob-txn.c
-+++ b/tests/test-blockjob-txn.c
-@@ -XXX,XX +XXX,XX @@ static void test_block_job_complete(Job *job, void *opaque)
-         rc = -ECANCELED;
-     }
--    job_completed(job, rc, NULL);
-+    job_completed(job, rc);
-     bdrv_unref(bs);
- }
-diff --git a/tests/test-blockjob.c b/tests/test-blockjob.c
-index XXXXXXX..XXXXXXX 100644
---- a/tests/test-blockjob.c
-+++ b/tests/test-blockjob.c
-@@ -XXX,XX +XXX,XX @@ static void cancel_job_completed(Job *job, void *opaque)
- {
-     CancelJob *s = opaque;
-     s->completed = true;
--    job_completed(job, 0, NULL);
-+    job_completed(job, 0);
- }
- static void cancel_job_complete(Job *job, Error **errp)
---
-.17.1

-[Qemu-devel] [PULL 05/11] jobs: add exit shim
+Deleted patch
-From: John Snow <jsnow@redhat.com>
-All jobs do the same thing when they leave their running loop:
-- Store the return code in a structure
-- wait to receive this structure in the main thread
-- signal job completion via job_completed
-Few jobs do anything beyond exactly this. Consolidate this exit
-logic for a net reduction in SLOC.
-More seriously, when we utilize job_defer_to_main_loop_bh to call
-a function that calls job_completed, job_finalize_single will run
-in a context where it has recursively taken the aio_context lock,
-which can cause hangs if it puts down a reference that causes a flush.
-You can observe this in practice by looking at mirror_exit's careful
-placement of job_completed and bdrv_unref calls.
-If we centralize job exiting, we can signal job completion from outside
-of the aio_context, which should allow for job cleanup code to run with
-only one lock, which makes cleanup callbacks less tricky to write.
-Signed-off-by: John Snow <jsnow@redhat.com>
-Reviewed-by: Max Reitz <mreitz@redhat.com>
-Message-id: 20180830015734.19765-4-jsnow@redhat.com
-Reviewed-by: Jeff Cody <jcody@redhat.com>
-Signed-off-by: Max Reitz <mreitz@redhat.com>
----
- include/qemu/job.h | 11 +++++++++++
- job.c              | 18 ++++++++++++++++++
-files changed, 29 insertions(+)
-diff --git a/include/qemu/job.h b/include/qemu/job.h
-index XXXXXXX..XXXXXXX 100644
---- a/include/qemu/job.h
-+++ b/include/qemu/job.h
-@@ -XXX,XX +XXX,XX @@ struct JobDriver {
-      */
-     void (*drain)(Job *job);
-+    /**
-+     * If the callback is not NULL, exit will be invoked from the main thread
-+     * when the job's coroutine has finished, but before transactional
-+     * convergence; before @prepare or @abort.
-+     *
-+     * FIXME TODO: This callback is only temporary to transition remaining jobs
-+     * to prepare/commit/abort/clean callbacks and will be removed before 3.1.
-+     * is released.
-+     */
-+    void (*exit)(Job *job);
-+
-     /**
-      * If the callback is not NULL, prepare will be invoked when all the jobs
-      * belonging to the same transaction complete; or upon this job's completion
-diff --git a/job.c b/job.c
-index XXXXXXX..XXXXXXX 100644
---- a/job.c
-+++ b/job.c
-@@ -XXX,XX +XXX,XX @@ void job_drain(Job *job)
-     }
- }
-+static void job_exit(void *opaque)
-+{
-+    Job *job = (Job *)opaque;
-+    AioContext *aio_context = job->aio_context;
-+
-+    if (job->driver->exit) {
-+        aio_context_acquire(aio_context);
-+        job->driver->exit(job);
-+        aio_context_release(aio_context);
-+    }
-+    job_completed(job, job->ret);
-+}
- /**
-  * All jobs must allow a pause point before entering their job proper. This
-@@ -XXX,XX +XXX,XX @@ static void coroutine_fn job_co_entry(void *opaque)
-     assert(job && job->driver && job->driver->run);
-     job_pause_point(job);
-     job->ret = job->driver->run(job, &job->err);
-+    if (!job->deferred_to_main_loop) {
-+        job->deferred_to_main_loop = true;
-+        aio_bh_schedule_oneshot(qemu_get_aio_context(),
-+                                job_exit,
-+                                job);
-+    }
- }
---
-.17.1

-[Qemu-devel] [PULL 06/11] block/commit: utilize job_exit shim
+Deleted patch
-From: John Snow <jsnow@redhat.com>
-Change the manual deferment to commit_complete into the implicit
-callback to job_exit, renaming commit_complete to commit_exit.
-This conversion does change the timing of when job_completed is
-called to after the bdrv_replace_node and bdrv_unref calls, which
-could have implications for bjob->blk which will now be put down
-after this cleanup.
-Kevin highlights that we did not take any permissions for that backend
-at job creation time, so it is safe to reorder these operations.
-Signed-off-by: John Snow <jsnow@redhat.com>
-Reviewed-by: Max Reitz <mreitz@redhat.com>
-Message-id: 20180830015734.19765-5-jsnow@redhat.com
-Reviewed-by: Jeff Cody <jcody@redhat.com>
-Signed-off-by: Max Reitz <mreitz@redhat.com>
----
- block/commit.c | 22 +++++-----------------
-file changed, 5 insertions(+), 17 deletions(-)
-diff --git a/block/commit.c b/block/commit.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/commit.c
-+++ b/block/commit.c
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn commit_populate(BlockBackend *bs, BlockBackend *base,
-     return 0;
- }
--typedef struct {
--    int ret;
--} CommitCompleteData;
--
--static void commit_complete(Job *job, void *opaque)
-+static void commit_exit(Job *job)
- {
-     CommitBlockJob *s = container_of(job, CommitBlockJob, common.job);
-     BlockJob *bjob = &s->common;
--    CommitCompleteData *data = opaque;
-     BlockDriverState *top = blk_bs(s->top);
-     BlockDriverState *base = blk_bs(s->base);
-     BlockDriverState *commit_top_bs = s->commit_top_bs;
--    int ret = data->ret;
-     bool remove_commit_top_bs = false;
-     /* Make sure commit_top_bs and top stay around until bdrv_replace_node() */
-@@ -XXX,XX +XXX,XX @@ static void commit_complete(Job *job, void *opaque)
-      * the normal backing chain can be restored. */
-     blk_unref(s->base);
--    if (!job_is_cancelled(job) && ret == 0) {
-+    if (!job_is_cancelled(job) && job->ret == 0) {
-         /* success */
--        ret = bdrv_drop_intermediate(s->commit_top_bs, base,
--                                     s->backing_file_str);
-+        job->ret = bdrv_drop_intermediate(s->commit_top_bs, base,
-+                                          s->backing_file_str);
-     } else {
-         /* XXX Can (or should) we somehow keep 'consistent read' blocked even
-          * after the failed/cancelled commit job is gone? If we already wrote
-@@ -XXX,XX +XXX,XX @@ static void commit_complete(Job *job, void *opaque)
-      * bdrv_set_backing_hd() to fail. */
-     block_job_remove_all_bdrv(bjob);
--    job_completed(job, ret);
--    g_free(data);
--
-     /* If bdrv_drop_intermediate() didn't already do that, remove the commit
-      * filter driver from the backing chain. Do this as the final step so that
-      * the 'consistent read' permission can be granted.  */
-@@ -XXX,XX +XXX,XX @@ static void commit_complete(Job *job, void *opaque)
- static int coroutine_fn commit_run(Job *job, Error **errp)
- {
-     CommitBlockJob *s = container_of(job, CommitBlockJob, common.job);
--    CommitCompleteData *data;
-     int64_t offset;
-     uint64_t delay_ns = 0;
-     int ret = 0;
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn commit_run(Job *job, Error **errp)
- out:
-     qemu_vfree(buf);
--    data = g_malloc(sizeof(*data));
--    data->ret = ret;
--    job_defer_to_main_loop(&s->common.job, commit_complete, data);
-     return ret;
- }
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver commit_job_driver = {
-         .user_resume   = block_job_user_resume,
-         .drain         = block_job_drain,
-         .run           = commit_run,
-+        .exit          = commit_exit,
-     },
- };
---
-.17.1

-[Qemu-devel] [PULL 07/11] block/mirror: utilize job_exit shim
+Deleted patch
-From: John Snow <jsnow@redhat.com>
-Change the manual deferment to mirror_exit into the implicit
-callback to job_exit and the mirror_exit callback.
-This does change the order of some bdrv_unref calls and job_completed,
-but thanks to the new context in which we call .exit, this is safe to
-defer the possible flushing of any nodes to the job_finalize_single
-cleanup stage.
-Signed-off-by: John Snow <jsnow@redhat.com>
-Message-id: 20180830015734.19765-6-jsnow@redhat.com
-Reviewed-by: Max Reitz <mreitz@redhat.com>
-Reviewed-by: Jeff Cody <jcody@redhat.com>
-Signed-off-by: Max Reitz <mreitz@redhat.com>
----
- block/mirror.c | 29 +++++++++++------------------
-file changed, 11 insertions(+), 18 deletions(-)
-diff --git a/block/mirror.c b/block/mirror.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/mirror.c
-+++ b/block/mirror.c
-@@ -XXX,XX +XXX,XX @@ static void mirror_wait_for_all_io(MirrorBlockJob *s)
-     }
- }
--typedef struct {
--    int ret;
--} MirrorExitData;
--
--static void mirror_exit(Job *job, void *opaque)
-+static void mirror_exit(Job *job)
- {
-     MirrorBlockJob *s = container_of(job, MirrorBlockJob, common.job);
-     BlockJob *bjob = &s->common;
--    MirrorExitData *data = opaque;
-     MirrorBDSOpaque *bs_opaque = s->mirror_top_bs->opaque;
-     AioContext *replace_aio_context = NULL;
-     BlockDriverState *src = s->mirror_top_bs->backing->bs;
-     BlockDriverState *target_bs = blk_bs(s->target);
-     BlockDriverState *mirror_top_bs = s->mirror_top_bs;
-     Error *local_err = NULL;
-+    int ret = job->ret;
-     bdrv_release_dirty_bitmap(src, s->dirty_bitmap);
--    /* Make sure that the source BDS doesn't go away before we called
--     * job_completed(). */
-+    /* Make sure that the source BDS doesn't go away during bdrv_replace_node,
-+     * before we can call bdrv_drained_end */
-     bdrv_ref(src);
-     bdrv_ref(mirror_top_bs);
-     bdrv_ref(target_bs);
-@@ -XXX,XX +XXX,XX @@ static void mirror_exit(Job *job, void *opaque)
-             bdrv_set_backing_hd(target_bs, backing, &local_err);
-             if (local_err) {
-                 error_report_err(local_err);
--                data->ret = -EPERM;
-+                ret = -EPERM;
-             }
-         }
-     }
-@@ -XXX,XX +XXX,XX @@ static void mirror_exit(Job *job, void *opaque)
-         aio_context_acquire(replace_aio_context);
-     }
--    if (s->should_complete && data->ret == 0) {
-+    if (s->should_complete && ret == 0) {
-         BlockDriverState *to_replace = src;
-         if (s->to_replace) {
-             to_replace = s->to_replace;
-@@ -XXX,XX +XXX,XX @@ static void mirror_exit(Job *job, void *opaque)
-         bdrv_drained_end(target_bs);
-         if (local_err) {
-             error_report_err(local_err);
--            data->ret = -EPERM;
-+            ret = -EPERM;
-         }
-     }
-     if (s->to_replace) {
-@@ -XXX,XX +XXX,XX @@ static void mirror_exit(Job *job, void *opaque)
-     blk_insert_bs(bjob->blk, mirror_top_bs, &error_abort);
-     bs_opaque->job = NULL;
--    job_completed(job, data->ret);
--    g_free(data);
-     bdrv_drained_end(src);
-     bdrv_unref(mirror_top_bs);
-     bdrv_unref(src);
-+
-+    job->ret = ret;
- }
- static void mirror_throttle(MirrorBlockJob *s)
-@@ -XXX,XX +XXX,XX @@ static int mirror_flush(MirrorBlockJob *s)
- static int coroutine_fn mirror_run(Job *job, Error **errp)
- {
-     MirrorBlockJob *s = container_of(job, MirrorBlockJob, common.job);
--    MirrorExitData *data;
-     BlockDriverState *bs = s->mirror_top_bs->backing->bs;
-     BlockDriverState *target_bs = blk_bs(s->target);
-     bool need_drain = true;
-@@ -XXX,XX +XXX,XX @@ immediate_exit:
-     g_free(s->in_flight_bitmap);
-     bdrv_dirty_iter_free(s->dbi);
--    data = g_malloc(sizeof(*data));
--    data->ret = ret;
--
-     if (need_drain) {
-         bdrv_drained_begin(bs);
-     }
--    job_defer_to_main_loop(&s->common.job, mirror_exit, data);
-     return ret;
- }
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver mirror_job_driver = {
-         .user_resume            = block_job_user_resume,
-         .drain                  = block_job_drain,
-         .run                    = mirror_run,
-+        .exit                   = mirror_exit,
-         .pause                  = mirror_pause,
-         .complete               = mirror_complete,
-     },
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver commit_active_job_driver = {
-         .user_resume            = block_job_user_resume,
-         .drain                  = block_job_drain,
-         .run                    = mirror_run,
-+        .exit                   = mirror_exit,
-         .pause                  = mirror_pause,
-         .complete               = mirror_complete,
-     },
---
-.17.1

-[Qemu-devel] [PULL 08/11] jobs: utilize job_exit shim
+Deleted patch
-From: John Snow <jsnow@redhat.com>
-Utilize the job_exit shim by not calling job_defer_to_main_loop, and
-where applicable, converting the deferred callback into the job_exit
-callback.
-This converts backup, stream, create, and the unit tests all at once.
-Most of these jobs do not see any changes to the order in which they
-clean up their resources, except the test-blockjob-txn test, which
-now puts down its bs before job_completed is called.
-This is safe for the same reason the reordering in the mirror job is
-safe, because job_completed no longer runs under two locks, making
-the unref safe even if it causes a flush.
-Signed-off-by: John Snow <jsnow@redhat.com>
-Reviewed-by: Max Reitz <mreitz@redhat.com>
-Message-id: 20180830015734.19765-7-jsnow@redhat.com
-Signed-off-by: Max Reitz <mreitz@redhat.com>
----
- block/backup.c            | 16 ----------------
- block/create.c            | 14 +++-----------
- block/stream.c            | 22 +++++++---------------
- tests/test-bdrv-drain.c   |  6 ------
- tests/test-blockjob-txn.c | 11 ++---------
- tests/test-blockjob.c     | 10 ++++------
-files changed, 16 insertions(+), 63 deletions(-)
-diff --git a/block/backup.c b/block/backup.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/backup.c
-+++ b/block/backup.c
-@@ -XXX,XX +XXX,XX @@ static BlockErrorAction backup_error_action(BackupBlockJob *job,
-     }
- }
--typedef struct {
--    int ret;
--} BackupCompleteData;
--
--static void backup_complete(Job *job, void *opaque)
--{
--    BackupCompleteData *data = opaque;
--
--    job_completed(job, data->ret);
--    g_free(data);
--}
--
- static bool coroutine_fn yield_and_check(BackupBlockJob *job)
- {
-     uint64_t delay_ns;
-@@ -XXX,XX +XXX,XX @@ static void backup_incremental_init_copy_bitmap(BackupBlockJob *job)
- static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
- {
-     BackupBlockJob *job = container_of(opaque_job, BackupBlockJob, common.job);
--    BackupCompleteData *data;
-     BlockDriverState *bs = blk_bs(job->common.blk);
-     int64_t offset, nb_clusters;
-     int ret = 0;
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
-     qemu_co_rwlock_unlock(&job->flush_rwlock);
-     hbitmap_free(job->copy_bitmap);
--    data = g_malloc(sizeof(*data));
--    data->ret = ret;
--    job_defer_to_main_loop(&job->common.job, backup_complete, data);
-     return ret;
- }
-diff --git a/block/create.c b/block/create.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/create.c
-+++ b/block/create.c
-@@ -XXX,XX +XXX,XX @@ typedef struct BlockdevCreateJob {
-     Job common;
-     BlockDriver *drv;
-     BlockdevCreateOptions *opts;
--    int ret;
- } BlockdevCreateJob;
--static void blockdev_create_complete(Job *job, void *opaque)
--{
--    BlockdevCreateJob *s = container_of(job, BlockdevCreateJob, common);
--
--    job_completed(job, s->ret);
--}
--
- static int coroutine_fn blockdev_create_run(Job *job, Error **errp)
- {
-     BlockdevCreateJob *s = container_of(job, BlockdevCreateJob, common);
-+    int ret;
-     job_progress_set_remaining(&s->common, 1);
--    s->ret = s->drv->bdrv_co_create(s->opts, errp);
-+    ret = s->drv->bdrv_co_create(s->opts, errp);
-     job_progress_update(&s->common, 1);
-     qapi_free_BlockdevCreateOptions(s->opts);
--    job_defer_to_main_loop(&s->common, blockdev_create_complete, NULL);
--    return s->ret;
-+    return ret;
- }
- static const JobDriver blockdev_create_job_driver = {
-diff --git a/block/stream.c b/block/stream.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/stream.c
-+++ b/block/stream.c
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn stream_populate(BlockBackend *blk,
-     return blk_co_preadv(blk, offset, qiov.size, &qiov, BDRV_REQ_COPY_ON_READ);
- }
--typedef struct {
--    int ret;
--} StreamCompleteData;
--
--static void stream_complete(Job *job, void *opaque)
-+static void stream_exit(Job *job)
- {
-     StreamBlockJob *s = container_of(job, StreamBlockJob, common.job);
-     BlockJob *bjob = &s->common;
--    StreamCompleteData *data = opaque;
-     BlockDriverState *bs = blk_bs(bjob->blk);
-     BlockDriverState *base = s->base;
-     Error *local_err = NULL;
-+    int ret = job->ret;
--    if (!job_is_cancelled(job) && bs->backing && data->ret == 0) {
-+    if (!job_is_cancelled(job) && bs->backing && ret == 0) {
-         const char *base_id = NULL, *base_fmt = NULL;
-         if (base) {
-             base_id = s->backing_file_str;
-@@ -XXX,XX +XXX,XX @@ static void stream_complete(Job *job, void *opaque)
-                 base_fmt = base->drv->format_name;
-             }
-         }
--        data->ret = bdrv_change_backing_file(bs, base_id, base_fmt);
-+        ret = bdrv_change_backing_file(bs, base_id, base_fmt);
-         bdrv_set_backing_hd(bs, base, &local_err);
-         if (local_err) {
-             error_report_err(local_err);
--            data->ret = -EPERM;
-+            ret = -EPERM;
-             goto out;
-         }
-     }
-@@ -XXX,XX +XXX,XX @@ out:
-     }
-     g_free(s->backing_file_str);
--    job_completed(job, data->ret);
--    g_free(data);
-+    job->ret = ret;
- }
- static int coroutine_fn stream_run(Job *job, Error **errp)
- {
-     StreamBlockJob *s = container_of(job, StreamBlockJob, common.job);
--    StreamCompleteData *data;
-     BlockBackend *blk = s->common.blk;
-     BlockDriverState *bs = blk_bs(blk);
-     BlockDriverState *base = s->base;
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn stream_run(Job *job, Error **errp)
- out:
-     /* Modify backing chain and close BDSes in main loop */
--    data = g_malloc(sizeof(*data));
--    data->ret = ret;
--    job_defer_to_main_loop(&s->common.job, stream_complete, data);
-     return ret;
- }
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver stream_job_driver = {
-         .job_type      = JOB_TYPE_STREAM,
-         .free          = block_job_free,
-         .run           = stream_run,
-+        .exit          = stream_exit,
-         .user_resume   = block_job_user_resume,
-         .drain         = block_job_drain,
-     },
-diff --git a/tests/test-bdrv-drain.c b/tests/test-bdrv-drain.c
-index XXXXXXX..XXXXXXX 100644
---- a/tests/test-bdrv-drain.c
-+++ b/tests/test-bdrv-drain.c
-@@ -XXX,XX +XXX,XX @@ typedef struct TestBlockJob {
-     bool should_complete;
- } TestBlockJob;
--static void test_job_completed(Job *job, void *opaque)
--{
--    job_completed(job, 0);
--}
--
- static int coroutine_fn test_job_run(Job *job, Error **errp)
- {
-     TestBlockJob *s = container_of(job, TestBlockJob, common.job);
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn test_job_run(Job *job, Error **errp)
-         job_pause_point(&s->common.job);
-     }
--    job_defer_to_main_loop(&s->common.job, test_job_completed, NULL);
-     return 0;
- }
-diff --git a/tests/test-blockjob-txn.c b/tests/test-blockjob-txn.c
-index XXXXXXX..XXXXXXX 100644
---- a/tests/test-blockjob-txn.c
-+++ b/tests/test-blockjob-txn.c
-@@ -XXX,XX +XXX,XX @@ typedef struct {
-     int *result;
- } TestBlockJob;
--static void test_block_job_complete(Job *job, void *opaque)
-+static void test_block_job_exit(Job *job)
- {
-     BlockJob *bjob = container_of(job, BlockJob, job);
-     BlockDriverState *bs = blk_bs(bjob->blk);
--    int rc = (intptr_t)opaque;
--    if (job_is_cancelled(job)) {
--        rc = -ECANCELED;
--    }
--
--    job_completed(job, rc);
-     bdrv_unref(bs);
- }
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn test_block_job_run(Job *job, Error **errp)
-         }
-     }
--    job_defer_to_main_loop(job, test_block_job_complete,
--                           (void *)(intptr_t)s->rc);
-     return s->rc;
- }
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver test_block_job_driver = {
-         .user_resume   = block_job_user_resume,
-         .drain         = block_job_drain,
-         .run           = test_block_job_run,
-+        .exit          = test_block_job_exit,
-     },
- };
-diff --git a/tests/test-blockjob.c b/tests/test-blockjob.c
-index XXXXXXX..XXXXXXX 100644
---- a/tests/test-blockjob.c
-+++ b/tests/test-blockjob.c
-@@ -XXX,XX +XXX,XX @@ typedef struct CancelJob {
-     bool completed;
- } CancelJob;
--static void cancel_job_completed(Job *job, void *opaque)
-+static void cancel_job_exit(Job *job)
- {
--    CancelJob *s = opaque;
-+    CancelJob *s = container_of(job, CancelJob, common.job);
-     s->completed = true;
--    job_completed(job, 0);
- }
- static void cancel_job_complete(Job *job, Error **errp)
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn cancel_job_run(Job *job, Error **errp)
-     while (!s->should_complete) {
-         if (job_is_cancelled(&s->common.job)) {
--            goto defer;
-+            return 0;
-         }
-         if (!job_is_ready(&s->common.job) && s->should_converge) {
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn cancel_job_run(Job *job, Error **errp)
-         job_sleep_ns(&s->common.job, 100000);
-     }
-- defer:
--    job_defer_to_main_loop(&s->common.job, cancel_job_completed, s);
-     return 0;
- }
-@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver test_cancel_driver = {
-         .user_resume   = block_job_user_resume,
-         .drain         = block_job_drain,
-         .run           = cancel_job_run,
-+        .exit          = cancel_job_exit,
-         .complete      = cancel_job_complete,
-     },
- };
---
-.17.1

-[Qemu-devel] [PULL 09/11] block/backup: make function variables consistently named
+Deleted patch
-From: John Snow <jsnow@redhat.com>
-Rename opaque_job to job to be consistent with other job implementations.
-Rename 'job', the BackupBlockJob object, to 's' to also be consistent.
-Suggested-by: Eric Blake <eblake@redhat.com>
-Signed-off-by: John Snow <jsnow@redhat.com>
-Reviewed-by: Max Reitz <mreitz@redhat.com>
-Message-id: 20180830015734.19765-8-jsnow@redhat.com
-Signed-off-by: Max Reitz <mreitz@redhat.com>
----
- block/backup.c | 62 +++++++++++++++++++++++++-------------------------
-file changed, 31 insertions(+), 31 deletions(-)
-diff --git a/block/backup.c b/block/backup.c
-index XXXXXXX..XXXXXXX 100644
---- a/block/backup.c
-+++ b/block/backup.c
-@@ -XXX,XX +XXX,XX @@ static void backup_incremental_init_copy_bitmap(BackupBlockJob *job)
-     bdrv_dirty_iter_free(dbi);
- }
--static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
-+static int coroutine_fn backup_run(Job *job, Error **errp)
- {
--    BackupBlockJob *job = container_of(opaque_job, BackupBlockJob, common.job);
--    BlockDriverState *bs = blk_bs(job->common.blk);
-+    BackupBlockJob *s = container_of(job, BackupBlockJob, common.job);
-+    BlockDriverState *bs = blk_bs(s->common.blk);
-     int64_t offset, nb_clusters;
-     int ret = 0;
--    QLIST_INIT(&job->inflight_reqs);
--    qemu_co_rwlock_init(&job->flush_rwlock);
-+    QLIST_INIT(&s->inflight_reqs);
-+    qemu_co_rwlock_init(&s->flush_rwlock);
--    nb_clusters = DIV_ROUND_UP(job->len, job->cluster_size);
--    job_progress_set_remaining(&job->common.job, job->len);
-+    nb_clusters = DIV_ROUND_UP(s->len, s->cluster_size);
-+    job_progress_set_remaining(job, s->len);
--    job->copy_bitmap = hbitmap_alloc(nb_clusters, 0);
--    if (job->sync_mode == MIRROR_SYNC_MODE_INCREMENTAL) {
--        backup_incremental_init_copy_bitmap(job);
-+    s->copy_bitmap = hbitmap_alloc(nb_clusters, 0);
-+    if (s->sync_mode == MIRROR_SYNC_MODE_INCREMENTAL) {
-+        backup_incremental_init_copy_bitmap(s);
-     } else {
--        hbitmap_set(job->copy_bitmap, 0, nb_clusters);
-+        hbitmap_set(s->copy_bitmap, 0, nb_clusters);
-     }
--    job->before_write.notify = backup_before_write_notify;
--    bdrv_add_before_write_notifier(bs, &job->before_write);
-+    s->before_write.notify = backup_before_write_notify;
-+    bdrv_add_before_write_notifier(bs, &s->before_write);
--    if (job->sync_mode == MIRROR_SYNC_MODE_NONE) {
-+    if (s->sync_mode == MIRROR_SYNC_MODE_NONE) {
-         /* All bits are set in copy_bitmap to allow any cluster to be copied.
-          * This does not actually require them to be copied. */
--        while (!job_is_cancelled(&job->common.job)) {
-+        while (!job_is_cancelled(job)) {
-             /* Yield until the job is cancelled.  We just let our before_write
-              * notify callback service CoW requests. */
--            job_yield(&job->common.job);
-+            job_yield(job);
-         }
--    } else if (job->sync_mode == MIRROR_SYNC_MODE_INCREMENTAL) {
--        ret = backup_run_incremental(job);
-+    } else if (s->sync_mode == MIRROR_SYNC_MODE_INCREMENTAL) {
-+        ret = backup_run_incremental(s);
-     } else {
-         /* Both FULL and TOP SYNC_MODE's require copying.. */
--        for (offset = 0; offset < job->len;
--             offset += job->cluster_size) {
-+        for (offset = 0; offset < s->len;
-+             offset += s->cluster_size) {
-             bool error_is_read;
-             int alloced = 0;
--            if (yield_and_check(job)) {
-+            if (yield_and_check(s)) {
-                 break;
-             }
--            if (job->sync_mode == MIRROR_SYNC_MODE_TOP) {
-+            if (s->sync_mode == MIRROR_SYNC_MODE_TOP) {
-                 int i;
-                 int64_t n;
-                 /* Check to see if these blocks are already in the
-                  * backing file. */
--                for (i = 0; i < job->cluster_size;) {
-+                for (i = 0; i < s->cluster_size;) {
-                     /* bdrv_is_allocated() only returns true/false based
-                      * on the first set of sectors it comes across that
-                      * are are all in the same state.
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
-                      * needed but at some point that is always the case. */
-                     alloced =
-                         bdrv_is_allocated(bs, offset + i,
--                                          job->cluster_size - i, &n);
-+                                          s->cluster_size - i, &n);
-                     i += n;
-                     if (alloced || n == 0) {
-@@ -XXX,XX +XXX,XX @@ static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
-             if (alloced < 0) {
-                 ret = alloced;
-             } else {
--                ret = backup_do_cow(job, offset, job->cluster_size,
-+                ret = backup_do_cow(s, offset, s->cluster_size,
-                                     &error_is_read, false);
-             }
-             if (ret < 0) {
-                 /* Depending on error action, fail now or retry cluster */
-                 BlockErrorAction action =
--                    backup_error_action(job, error_is_read, -ret);
-+                    backup_error_action(s, error_is_read, -ret);
-                 if (action == BLOCK_ERROR_ACTION_REPORT) {
-                     break;
-                 } else {
--                    offset -= job->cluster_size;
-+                    offset -= s->cluster_size;
-                     continue;
-                 }
-             }
-         }
-     }
--    notifier_with_return_remove(&job->before_write);
-+    notifier_with_return_remove(&s->before_write);
-     /* wait until pending backup_do_cow() calls have completed */
--    qemu_co_rwlock_wrlock(&job->flush_rwlock);
--    qemu_co_rwlock_unlock(&job->flush_rwlock);
--    hbitmap_free(job->copy_bitmap);
-+    qemu_co_rwlock_wrlock(&s->flush_rwlock);
-+    qemu_co_rwlock_unlock(&s->flush_rwlock);
-+    hbitmap_free(s->copy_bitmap);
-     return ret;
- }
---
-.17.1

-[Qemu-devel] [PULL 10/11] jobs: remove ret argument to job_completed; privatize it
+Deleted patch
-From: John Snow <jsnow@redhat.com>
-Jobs are now expected to return their retcode on the stack, from the
-.run callback, so we can remove that argument.
-job_cancel does not need to set -ECANCELED because job_completed will
-update the return code itself if the job was canceled.
-While we're here, make job_completed static to job.c and remove it from
-job.h; move the documentation of return code to the .run() callback and
-to the job->ret property, accordingly.
-Signed-off-by: John Snow <jsnow@redhat.com>
-Message-id: 20180830015734.19765-9-jsnow@redhat.com
-Reviewed-by: Max Reitz <mreitz@redhat.com>
-Signed-off-by: Max Reitz <mreitz@redhat.com>
----
- include/qemu/job.h | 28 +++++++++++++++-------------
- job.c              | 11 ++++++-----
- trace-events       |  2 +-
-files changed, 22 insertions(+), 19 deletions(-)
-diff --git a/include/qemu/job.h b/include/qemu/job.h
-index XXXXXXX..XXXXXXX 100644
---- a/include/qemu/job.h
-+++ b/include/qemu/job.h
-@@ -XXX,XX +XXX,XX @@ typedef struct Job {
-     /** Estimated progress_current value at the completion of the job */
-     int64_t progress_total;
--    /** ret code passed to job_completed. */
-+    /**
-+     * Return code from @run and/or @prepare callback(s).
-+     * Not final until the job has reached the CONCLUDED status.
-+     * 0 on success, -errno on failure.
-+     */
-     int ret;
-     /**
-@@ -XXX,XX +XXX,XX @@ struct JobDriver {
-     /** Enum describing the operation */
-     JobType job_type;
--    /** Mandatory: Entrypoint for the Coroutine. */
-+    /**
-+     * Mandatory: Entrypoint for the Coroutine.
-+     *
-+     * This callback will be invoked when moving from CREATED to RUNNING.
-+     *
-+     * If this callback returns nonzero, the job transaction it is part of is
-+     * aborted. If it returns zero, the job moves into the WAITING state. If it
-+     * is the last job to complete in its transaction, all jobs in the
-+     * transaction move from WAITING to PENDING.
-+     */
-     int coroutine_fn (*run)(Job *job, Error **errp);
-     /**
-@@ -XXX,XX +XXX,XX @@ void job_early_fail(Job *job);
- /** Moves the @job from RUNNING to READY */
- void job_transition_to_ready(Job *job);
--/**
-- * @job: The job being completed.
-- * @ret: The status code.
-- *
-- * Marks @job as completed. If @ret is non-zero, the job transaction it is part
-- * of is aborted. If @ret is zero, the job moves into the WAITING state. If it
-- * is the last job to complete in its transaction, all jobs in the transaction
-- * move from WAITING to PENDING.
-- */
--void job_completed(Job *job, int ret);
--
- /** Asynchronously complete the specified @job. */
- void job_complete(Job *job, Error **errp);
-diff --git a/job.c b/job.c
-index XXXXXXX..XXXXXXX 100644
---- a/job.c
-+++ b/job.c
-@@ -XXX,XX +XXX,XX @@ void job_drain(Job *job)
-     }
- }
-+static void job_completed(Job *job);
-+
- static void job_exit(void *opaque)
- {
-     Job *job = (Job *)opaque;
-@@ -XXX,XX +XXX,XX @@ static void job_exit(void *opaque)
-         job->driver->exit(job);
-         aio_context_release(aio_context);
-     }
--    job_completed(job, job->ret);
-+    job_completed(job);
- }
- /**
-@@ -XXX,XX +XXX,XX @@ static void job_completed_txn_success(Job *job)
-     }
- }
--void job_completed(Job *job, int ret)
-+static void job_completed(Job *job)
- {
-     assert(job && job->txn && !job_is_completed(job));
--    job->ret = ret;
-     job_update_rc(job);
--    trace_job_completed(job, ret, job->ret);
-+    trace_job_completed(job, job->ret);
-     if (job->ret) {
-         job_completed_txn_abort(job);
-     } else {
-@@ -XXX,XX +XXX,XX @@ void job_cancel(Job *job, bool force)
-     }
-     job_cancel_async(job, force);
-     if (!job_started(job)) {
--        job_completed(job, -ECANCELED);
-+        job_completed(job);
-     } else if (job->deferred_to_main_loop) {
-         job_completed_txn_abort(job);
-     } else {
-diff --git a/trace-events b/trace-events
-index XXXXXXX..XXXXXXX 100644
---- a/trace-events
-+++ b/trace-events
-@@ -XXX,XX +XXX,XX @@ gdbstub_err_checksum_incorrect(uint8_t expected, uint8_t got) "got command packe
- # job.c
- job_state_transition(void *job,  int ret, const char *legal, const char *s0, const char *s1) "job %p (ret: %d) attempting %s transition (%s-->%s)"
- job_apply_verb(void *job, const char *state, const char *verb, const char *legal) "job %p in state %s; applying verb %s (%s)"
--job_completed(void *job, int ret, int jret) "job %p ret %d corrected ret %d"
-+job_completed(void *job, int ret) "job %p ret %d"
- # job-qmp.c
- qmp_job_cancel(void *job) "job %p"
---
-.17.1

-[Qemu-devel] [PULL 11/11] jobs: remove job_defer_to_main_loop
+Deleted patch
-From: John Snow <jsnow@redhat.com>
-Now that the job infrastructure is handling the job_completed call for
-all implemented jobs, we can remove the interface that allowed jobs to
-schedule their own completion.
-Signed-off-by: John Snow <jsnow@redhat.com>
-Reviewed-by: Max Reitz <mreitz@redhat.com>
-Message-id: 20180830015734.19765-10-jsnow@redhat.com
-Signed-off-by: Max Reitz <mreitz@redhat.com>
----
- include/qemu/job.h | 17 -----------------
- job.c              | 40 ++--------------------------------------
-files changed, 2 insertions(+), 55 deletions(-)
-diff --git a/include/qemu/job.h b/include/qemu/job.h
-index XXXXXXX..XXXXXXX 100644
---- a/include/qemu/job.h
-+++ b/include/qemu/job.h
-@@ -XXX,XX +XXX,XX @@ void job_finalize(Job *job, Error **errp);
-  */
- void job_dismiss(Job **job, Error **errp);
--typedef void JobDeferToMainLoopFn(Job *job, void *opaque);
--
--/**
-- * @job: The job
-- * @fn: The function to run in the main loop
-- * @opaque: The opaque value that is passed to @fn
-- *
-- * This function must be called by the main job coroutine just before it
-- * returns.  @fn is executed in the main loop with the job AioContext acquired.
-- *
-- * Block jobs must call bdrv_unref(), bdrv_close(), and anything that uses
-- * bdrv_drain_all() in the main loop.
-- *
-- * The @job AioContext is held while @fn executes.
-- */
--void job_defer_to_main_loop(Job *job, JobDeferToMainLoopFn *fn, void *opaque);
--
- /**
-  * Synchronously finishes the given @job. If @finish is given, it is called to
-  * trigger completion or cancellation of the job.
-diff --git a/job.c b/job.c
-index XXXXXXX..XXXXXXX 100644
---- a/job.c
-+++ b/job.c
-@@ -XXX,XX +XXX,XX @@ static void coroutine_fn job_co_entry(void *opaque)
-     assert(job && job->driver && job->driver->run);
-     job_pause_point(job);
-     job->ret = job->driver->run(job, &job->err);
--    if (!job->deferred_to_main_loop) {
--        job->deferred_to_main_loop = true;
--        aio_bh_schedule_oneshot(qemu_get_aio_context(),
--                                job_exit,
--                                job);
--    }
-+    job->deferred_to_main_loop = true;
-+    aio_bh_schedule_oneshot(qemu_get_aio_context(), job_exit, job);
- }
-@@ -XXX,XX +XXX,XX @@ void job_complete(Job *job, Error **errp)
-     job->driver->complete(job, errp);
- }
--
--typedef struct {
--    Job *job;
--    JobDeferToMainLoopFn *fn;
--    void *opaque;
--} JobDeferToMainLoopData;
--
--static void job_defer_to_main_loop_bh(void *opaque)
--{
--    JobDeferToMainLoopData *data = opaque;
--    Job *job = data->job;
--    AioContext *aio_context = job->aio_context;
--
--    aio_context_acquire(aio_context);
--    data->fn(data->job, data->opaque);
--    aio_context_release(aio_context);
--
--    g_free(data);
--}
--
--void job_defer_to_main_loop(Job *job, JobDeferToMainLoopFn *fn, void *opaque)
--{
--    JobDeferToMainLoopData *data = g_malloc(sizeof(*data));
--    data->job = job;
--    data->fn = fn;
--    data->opaque = opaque;
--    job->deferred_to_main_loop = true;
--
--    aio_bh_schedule_oneshot(qemu_get_aio_context(),
--                            job_defer_to_main_loop_bh, data);
--}
--
- int job_finish_sync(Job *job, void (*finish)(Job *, Error **errp), Error **errp)
- {
-     Error *local_err = NULL;
---
-.17.1

The following changes since commit 19b599f7664b2ebfd0f405fb79c14dd241557452:

Merge remote-tracking branch 'remotes/armbru/tags/pull-error-2018-08-27-v2' into staging (2018-08-27 16:44:20 +0100)

are available in the Git repository at:

https://git.xanclic.moe/XanClic/qemu.git tags/pull-block-2018-08-31

for you to fetch changes up to 40954cc7831c4f95f9ce6402ae3d6761f44f31ff:

jobs: remove job_defer_to_main_loop (2018-08-31 16:11:27 +0200)

----------------------------------------------------------------
Block patches:
- (Block) job exit refactoring, part 1
  (removing job_defer_to_main_loop())
- Locking fix for the file-posix block driver
- test-bdrv-drain leak fix

----------------------------------------------------------------
Fam Zheng (1):
  file-posix: Skip effectiveless OFD lock operations

John Snow (9):
  jobs: change start callback to run callback
  jobs: canonize Error object
  jobs: add exit shim
  block/commit: utilize job_exit shim
  block/mirror: utilize job_exit shim
  jobs: utilize job_exit shim
  block/backup: make function variables consistently named
  jobs: remove ret argument to job_completed; privatize it
  jobs: remove job_defer_to_main_loop

Marc-André Lureau (1):
  tests: fix bdrv-drain leak

-- 
2.17.1

From: Fam Zheng <famz@redhat.com>

If we know we've already locked the bytes, don't do it again; similarly
don't unlock a byte if we haven't locked it. This doesn't change the
behavior, but fixes a corner case explained below.

Libvirt had an error handling bug that an image can get its (ownership,
file mode, SELinux) permissions changed (RHBZ 1584982) by mistake behind
QEMU. Specifically, an image in use by Libvirt VM has:

$ ls -lhZ b.img
    -rw-r--r--. qemu qemu system_u:object_r:svirt_image_t:s0:c600,c690 b.img

Trying to attach it a second time won't work because of image locking.
And after the error, it becomes:

$ ls -lhZ b.img
    -rw-r--r--. root root system_u:object_r:virt_image_t:s0 b.img

Then, we won't be able to do OFD lock operations with the existing fd.
In other words, the code such as in blk_detach_dev:

blk_set_perm(blk, 0, BLK_PERM_ALL, &error_abort);

can abort() QEMU, out of environmental changes.

This patch is an easy fix to this and the change is regardlessly
reasonable, so do it.

Signed-off-by: Fam Zheng <famz@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
---
 block/file-posix.c | 41 +++++++++++++++++++++++++++++++----------
 1 file changed, 31 insertions(+), 10 deletions(-)

diff --git a/block/file-posix.c b/block/file-posix.c
index XXXXXXX..XXXXXXX 100644
--- a/block/file-posix.c
+++ b/block/file-posix.c
@@ -XXX,XX +XXX,XX @@ typedef enum {
  * file; if @unlock == true, also unlock the unneeded bytes.
  * @shared_perm_lock_bits is the mask of all permissions that are NOT shared.
  */
-static int raw_apply_lock_bytes(int fd,
+static int raw_apply_lock_bytes(BDRVRawState *s, int fd,
                                 uint64_t perm_lock_bits,
                                 uint64_t shared_perm_lock_bits,
                                 bool unlock, Error **errp)
 {
     int ret;
     int i;
+    uint64_t locked_perm, locked_shared_perm;
+
+    if (s) {
+        locked_perm = s->perm;
+        locked_shared_perm = ~s->shared_perm & BLK_PERM_ALL;
+    } else {
+        /*
+         * We don't have the previous bits, just lock/unlock for each of the
+         * requested bits.
+         */
+        if (unlock) {
+            locked_perm = BLK_PERM_ALL;
+            locked_shared_perm = BLK_PERM_ALL;
+        } else {
+            locked_perm = 0;
+            locked_shared_perm = 0;
+        }
+    }
 
     PERM_FOREACH(i) {
         int off = RAW_LOCK_PERM_BASE + i;
-        if (perm_lock_bits & (1ULL << i)) {
+        uint64_t bit = (1ULL << i);
+        if ((perm_lock_bits & bit) && !(locked_perm & bit)) {
             ret = qemu_lock_fd(fd, off, 1, false);
             if (ret) {
                 error_setg(errp, "Failed to lock byte %d", off);
                 return ret;
             }
-        } else if (unlock) {
+        } else if (unlock && (locked_perm & bit) && !(perm_lock_bits & bit)) {
             ret = qemu_unlock_fd(fd, off, 1);
             if (ret) {
                 error_setg(errp, "Failed to unlock byte %d", off);
@@ -XXX,XX +XXX,XX @@ static int raw_apply_lock_bytes(int fd,
     }
     PERM_FOREACH(i) {
         int off = RAW_LOCK_SHARED_BASE + i;
-        if (shared_perm_lock_bits & (1ULL << i)) {
+        uint64_t bit = (1ULL << i);
+        if ((shared_perm_lock_bits & bit) && !(locked_shared_perm & bit)) {
             ret = qemu_lock_fd(fd, off, 1, false);
             if (ret) {
                 error_setg(errp, "Failed to lock byte %d", off);
                 return ret;
             }
-        } else if (unlock) {
+        } else if (unlock && (locked_shared_perm & bit) &&
+                   !(shared_perm_lock_bits & bit)) {
             ret = qemu_unlock_fd(fd, off, 1);
             if (ret) {
                 error_setg(errp, "Failed to unlock byte %d", off);
@@ -XXX,XX +XXX,XX @@ static int raw_handle_perm_lock(BlockDriverState *bs,
 
     switch (op) {
     case RAW_PL_PREPARE:
-        ret = raw_apply_lock_bytes(s->lock_fd, s->perm | new_perm,
+        ret = raw_apply_lock_bytes(s, s->lock_fd, s->perm | new_perm,
                                    ~s->shared_perm | ~new_shared,
                                    false, errp);
         if (!ret) {
@@ -XXX,XX +XXX,XX @@ static int raw_handle_perm_lock(BlockDriverState *bs,
         op = RAW_PL_ABORT;
         /* fall through to unlock bytes. */
     case RAW_PL_ABORT:
-        raw_apply_lock_bytes(s->lock_fd, s->perm, ~s->shared_perm,
+        raw_apply_lock_bytes(s, s->lock_fd, s->perm, ~s->shared_perm,
                              true, &local_err);
         if (local_err) {
             /* Theoretically the above call only unlocks bytes and it cannot
@@ -XXX,XX +XXX,XX @@ static int raw_handle_perm_lock(BlockDriverState *bs,
         }
         break;
     case RAW_PL_COMMIT:
-        raw_apply_lock_bytes(s->lock_fd, new_perm, ~new_shared,
+        raw_apply_lock_bytes(s, s->lock_fd, new_perm, ~new_shared,
                              true, &local_err);
         if (local_err) {
             /* Theoretically the above call only unlocks bytes and it cannot
@@ -XXX,XX +XXX,XX @@ raw_co_create(BlockdevCreateOptions *options, Error **errp)
     shared = BLK_PERM_ALL & ~BLK_PERM_RESIZE;
 
     /* Step one: Take locks */
-    result = raw_apply_lock_bytes(fd, perm, ~shared, false, errp);
+    result = raw_apply_lock_bytes(NULL, fd, perm, ~shared, false, errp);
     if (result < 0) {
         goto out_close;
     }
@@ -XXX,XX +XXX,XX @@ raw_co_create(BlockdevCreateOptions *options, Error **errp)
     }
 
 out_unlock:
-    raw_apply_lock_bytes(fd, 0, 0, true, &local_err);
+    raw_apply_lock_bytes(NULL, fd, 0, 0, true, &local_err);
     if (local_err) {
         /* The above call should not fail, and if it does, that does
          * not mean the whole creation operation has failed.  So
-- 
2.17.1

From: Marc-André Lureau <marcandre.lureau@redhat.com>

Spotted by ASAN:

=================================================================
==5378==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 65536 byte(s) in 1 object(s) allocated from:
    #0 0x7f788f83bc48 in malloc (/lib64/libasan.so.5+0xeec48)
    #1 0x7f788c9923c5 in g_malloc (/lib64/libglib-2.0.so.0+0x523c5)
    #2 0x5622a1fe37bc in coroutine_trampoline /home/elmarco/src/qq/util/coroutine-ucontext.c:116
    #3 0x7f788a15d75f in __correctly_grouped_prefixwc (/lib64/libc.so.6+0x4c75f)

(Broken in commit 4c8158e359d.)

Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Message-id: 20180809114417.28718-3-marcandre.lureau@redhat.com
Signed-off-by: Max Reitz <mreitz@redhat.com>
---
 tests/test-bdrv-drain.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tests/test-bdrv-drain.c b/tests/test-bdrv-drain.c
index XXXXXXX..XXXXXXX 100644
--- a/tests/test-bdrv-drain.c
+++ b/tests/test-bdrv-drain.c
@@ -XXX,XX +XXX,XX @@ static void coroutine_fn test_co_delete_by_drain(void *opaque)
     }
 
     dbdd->done = true;
+    g_free(buffer);
 }
 
 /**
-- 
2.17.1

From: John Snow <jsnow@redhat.com>

Presently we codify the entry point for a job as the "start" callback,
but a more apt name would be "run" to clarify the idea that when this
function returns we consider the job to have "finished," except for
any cleanup which occurs in separate callbacks later.

As part of this clarification, change the signature to include an error
object and a return code. The error ptr is not yet used, and the return
code while captured, will be overwritten by actions in the job_completed
function.

Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Message-id: 20180830015734.19765-2-jsnow@redhat.com
Reviewed-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Max Reitz <mreitz@redhat.com>
---
 include/qemu/job.h        |  2 +-
 block/backup.c            |  7 ++++---
 block/commit.c            |  7 ++++---
 block/create.c            |  8 +++++---
 block/mirror.c            | 10 ++++++----
 block/stream.c            |  7 ++++---
 job.c                     |  6 +++---
 tests/test-bdrv-drain.c   |  7 ++++---
 tests/test-blockjob-txn.c | 16 ++++++++--------
 tests/test-blockjob.c     |  7 ++++---
 10 files changed, 43 insertions(+), 34 deletions(-)

diff --git a/include/qemu/job.h b/include/qemu/job.h
index XXXXXXX..XXXXXXX 100644
--- a/include/qemu/job.h
+++ b/include/qemu/job.h
@@ -XXX,XX +XXX,XX @@ struct JobDriver {
     JobType job_type;
 
     /** Mandatory: Entrypoint for the Coroutine. */
-    CoroutineEntry *start;
+    int coroutine_fn (*run)(Job *job, Error **errp);
 
     /**
      * If the callback is not NULL, it will be invoked when the job transitions
diff --git a/block/backup.c b/block/backup.c
index XXXXXXX..XXXXXXX 100644
--- a/block/backup.c
+++ b/block/backup.c
@@ -XXX,XX +XXX,XX @@ static void backup_incremental_init_copy_bitmap(BackupBlockJob *job)
     bdrv_dirty_iter_free(dbi);
 }
 
-static void coroutine_fn backup_run(void *opaque)
+static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
 {
-    BackupBlockJob *job = opaque;
+    BackupBlockJob *job = container_of(opaque_job, BackupBlockJob, common.job);
     BackupCompleteData *data;
     BlockDriverState *bs = blk_bs(job->common.blk);
     int64_t offset, nb_clusters;
@@ -XXX,XX +XXX,XX @@ static void coroutine_fn backup_run(void *opaque)
     data = g_malloc(sizeof(*data));
     data->ret = ret;
     job_defer_to_main_loop(&job->common.job, backup_complete, data);
+    return ret;
 }
 
 static const BlockJobDriver backup_job_driver = {
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver backup_job_driver = {
         .free                   = block_job_free,
         .user_resume            = block_job_user_resume,
         .drain                  = block_job_drain,
-        .start                  = backup_run,
+        .run                    = backup_run,
         .commit                 = backup_commit,
         .abort                  = backup_abort,
         .clean                  = backup_clean,
diff --git a/block/commit.c b/block/commit.c
index XXXXXXX..XXXXXXX 100644
--- a/block/commit.c
+++ b/block/commit.c
@@ -XXX,XX +XXX,XX @@ static void commit_complete(Job *job, void *opaque)
     bdrv_unref(top);
 }
 
-static void coroutine_fn commit_run(void *opaque)
+static int coroutine_fn commit_run(Job *job, Error **errp)
 {
-    CommitBlockJob *s = opaque;
+    CommitBlockJob *s = container_of(job, CommitBlockJob, common.job);
     CommitCompleteData *data;
     int64_t offset;
     uint64_t delay_ns = 0;
@@ -XXX,XX +XXX,XX @@ out:
     data = g_malloc(sizeof(*data));
     data->ret = ret;
     job_defer_to_main_loop(&s->common.job, commit_complete, data);
+    return ret;
 }
 
 static const BlockJobDriver commit_job_driver = {
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver commit_job_driver = {
         .free          = block_job_free,
         .user_resume   = block_job_user_resume,
         .drain         = block_job_drain,
-        .start         = commit_run,
+        .run           = commit_run,
     },
 };
 
diff --git a/block/create.c b/block/create.c
index XXXXXXX..XXXXXXX 100644
--- a/block/create.c
+++ b/block/create.c
@@ -XXX,XX +XXX,XX @@ static void blockdev_create_complete(Job *job, void *opaque)
     job_completed(job, s->ret, s->err);
 }
 
-static void coroutine_fn blockdev_create_run(void *opaque)
+static int coroutine_fn blockdev_create_run(Job *job, Error **errp)
 {
-    BlockdevCreateJob *s = opaque;
+    BlockdevCreateJob *s = container_of(job, BlockdevCreateJob, common);
 
     job_progress_set_remaining(&s->common, 1);
     s->ret = s->drv->bdrv_co_create(s->opts, &s->err);
@@ -XXX,XX +XXX,XX @@ static void coroutine_fn blockdev_create_run(void *opaque)
 
     qapi_free_BlockdevCreateOptions(s->opts);
     job_defer_to_main_loop(&s->common, blockdev_create_complete, NULL);
+
+    return s->ret;
 }
 
 static const JobDriver blockdev_create_job_driver = {
     .instance_size = sizeof(BlockdevCreateJob),
     .job_type      = JOB_TYPE_CREATE,
-    .start         = blockdev_create_run,
+    .run           = blockdev_create_run,
 };
 
 void qmp_blockdev_create(const char *job_id, BlockdevCreateOptions *options,
diff --git a/block/mirror.c b/block/mirror.c
index XXXXXXX..XXXXXXX 100644
--- a/block/mirror.c
+++ b/block/mirror.c
@@ -XXX,XX +XXX,XX @@ static int mirror_flush(MirrorBlockJob *s)
     return ret;
 }
 
-static void coroutine_fn mirror_run(void *opaque)
+static int coroutine_fn mirror_run(Job *job, Error **errp)
 {
-    MirrorBlockJob *s = opaque;
+    MirrorBlockJob *s = container_of(job, MirrorBlockJob, common.job);
     MirrorExitData *data;
     BlockDriverState *bs = s->mirror_top_bs->backing->bs;
     BlockDriverState *target_bs = blk_bs(s->target);
@@ -XXX,XX +XXX,XX @@ immediate_exit:
     if (need_drain) {
         bdrv_drained_begin(bs);
     }
+
     job_defer_to_main_loop(&s->common.job, mirror_exit, data);
+    return ret;
 }
 
 static void mirror_complete(Job *job, Error **errp)
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver mirror_job_driver = {
         .free                   = block_job_free,
         .user_resume            = block_job_user_resume,
         .drain                  = block_job_drain,
-        .start                  = mirror_run,
+        .run                    = mirror_run,
         .pause                  = mirror_pause,
         .complete               = mirror_complete,
     },
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver commit_active_job_driver = {
         .free                   = block_job_free,
         .user_resume            = block_job_user_resume,
         .drain                  = block_job_drain,
-        .start                  = mirror_run,
+        .run                    = mirror_run,
         .pause                  = mirror_pause,
         .complete               = mirror_complete,
     },
diff --git a/block/stream.c b/block/stream.c
index XXXXXXX..XXXXXXX 100644
--- a/block/stream.c
+++ b/block/stream.c
@@ -XXX,XX +XXX,XX @@ out:
     g_free(data);
 }
 
-static void coroutine_fn stream_run(void *opaque)
+static int coroutine_fn stream_run(Job *job, Error **errp)
 {
-    StreamBlockJob *s = opaque;
+    StreamBlockJob *s = container_of(job, StreamBlockJob, common.job);
     StreamCompleteData *data;
     BlockBackend *blk = s->common.blk;
     BlockDriverState *bs = blk_bs(blk);
@@ -XXX,XX +XXX,XX @@ out:
     data = g_malloc(sizeof(*data));
     data->ret = ret;
     job_defer_to_main_loop(&s->common.job, stream_complete, data);
+    return ret;
 }
 
 static const BlockJobDriver stream_job_driver = {
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver stream_job_driver = {
         .instance_size = sizeof(StreamBlockJob),
         .job_type      = JOB_TYPE_STREAM,
         .free          = block_job_free,
-        .start         = stream_run,
+        .run           = stream_run,
         .user_resume   = block_job_user_resume,
         .drain         = block_job_drain,
     },
diff --git a/job.c b/job.c
index XXXXXXX..XXXXXXX 100644
--- a/job.c
+++ b/job.c
@@ -XXX,XX +XXX,XX @@ static void coroutine_fn job_co_entry(void *opaque)
 {
     Job *job = opaque;
 
-    assert(job && job->driver && job->driver->start);
+    assert(job && job->driver && job->driver->run);
     job_pause_point(job);
-    job->driver->start(job);
+    job->ret = job->driver->run(job, NULL);
 }
 
 
 void job_start(Job *job)
 {
     assert(job && !job_started(job) && job->paused &&
-           job->driver && job->driver->start);
+           job->driver && job->driver->run);
     job->co = qemu_coroutine_create(job_co_entry, job);
     job->pause_count--;
     job->busy = true;
diff --git a/tests/test-bdrv-drain.c b/tests/test-bdrv-drain.c
index XXXXXXX..XXXXXXX 100644
--- a/tests/test-bdrv-drain.c
+++ b/tests/test-bdrv-drain.c
@@ -XXX,XX +XXX,XX @@ static void test_job_completed(Job *job, void *opaque)
     job_completed(job, 0, NULL);
 }
 
-static void coroutine_fn test_job_start(void *opaque)
+static int coroutine_fn test_job_run(Job *job, Error **errp)
 {
-    TestBlockJob *s = opaque;
+    TestBlockJob *s = container_of(job, TestBlockJob, common.job);
 
     job_transition_to_ready(&s->common.job);
     while (!s->should_complete) {
@@ -XXX,XX +XXX,XX @@ static void coroutine_fn test_job_start(void *opaque)
     }
 
     job_defer_to_main_loop(&s->common.job, test_job_completed, NULL);
+    return 0;
 }
 
 static void test_job_complete(Job *job, Error **errp)
@@ -XXX,XX +XXX,XX @@ BlockJobDriver test_job_driver = {
         .free           = block_job_free,
         .user_resume    = block_job_user_resume,
         .drain          = block_job_drain,
-        .start          = test_job_start,
+        .run            = test_job_run,
         .complete       = test_job_complete,
     },
 };
diff --git a/tests/test-blockjob-txn.c b/tests/test-blockjob-txn.c
index XXXXXXX..XXXXXXX 100644
--- a/tests/test-blockjob-txn.c
+++ b/tests/test-blockjob-txn.c
@@ -XXX,XX +XXX,XX @@ static void test_block_job_complete(Job *job, void *opaque)
     bdrv_unref(bs);
 }
 
-static void coroutine_fn test_block_job_run(void *opaque)
+static int coroutine_fn test_block_job_run(Job *job, Error **errp)
 {
-    TestBlockJob *s = opaque;
-    BlockJob *job = &s->common;
+    TestBlockJob *s = container_of(job, TestBlockJob, common.job);
 
     while (s->iterations--) {
         if (s->use_timer) {
-            job_sleep_ns(&job->job, 0);
+            job_sleep_ns(job, 0);
         } else {
-            job_yield(&job->job);
+            job_yield(job);
         }
 
-        if (job_is_cancelled(&job->job)) {
+        if (job_is_cancelled(job)) {
             break;
         }
     }
 
-    job_defer_to_main_loop(&job->job, test_block_job_complete,
+    job_defer_to_main_loop(job, test_block_job_complete,
                            (void *)(intptr_t)s->rc);
+    return s->rc;
 }
 
 typedef struct {
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver test_block_job_driver = {
         .free          = block_job_free,
         .user_resume   = block_job_user_resume,
         .drain         = block_job_drain,
-        .start         = test_block_job_run,
+        .run           = test_block_job_run,
     },
 };
 
diff --git a/tests/test-blockjob.c b/tests/test-blockjob.c
index XXXXXXX..XXXXXXX 100644
--- a/tests/test-blockjob.c
+++ b/tests/test-blockjob.c
@@ -XXX,XX +XXX,XX @@ static void cancel_job_complete(Job *job, Error **errp)
     s->should_complete = true;
 }
 
-static void coroutine_fn cancel_job_start(void *opaque)
+static int coroutine_fn cancel_job_run(Job *job, Error **errp)
 {
-    CancelJob *s = opaque;
+    CancelJob *s = container_of(job, CancelJob, common.job);
 
     while (!s->should_complete) {
         if (job_is_cancelled(&s->common.job)) {
@@ -XXX,XX +XXX,XX @@ static void coroutine_fn cancel_job_start(void *opaque)
 
  defer:
     job_defer_to_main_loop(&s->common.job, cancel_job_completed, s);
+    return 0;
 }
 
 static const BlockJobDriver test_cancel_driver = {
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver test_cancel_driver = {
         .free          = block_job_free,
         .user_resume   = block_job_user_resume,
         .drain         = block_job_drain,
-        .start         = cancel_job_start,
+        .run           = cancel_job_run,
         .complete      = cancel_job_complete,
     },
 };
-- 
2.17.1

From: John Snow <jsnow@redhat.com>

Jobs presently use both an Error object in the case of the create job,
and char strings in the case of generic errors elsewhere.

Unify the two paths as just j->err, and remove the extra argument from
job_completed. The integer error code for job_completed is kept for now,
to be removed shortly in a separate patch.

Signed-off-by: John Snow <jsnow@redhat.com>
Message-id: 20180830015734.19765-3-jsnow@redhat.com
[mreitz: Dropped a superfluous g_strdup()]
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Max Reitz <mreitz@redhat.com>
---
 include/qemu/job.h        | 14 ++++++++------
 block/backup.c            |  2 +-
 block/commit.c            |  2 +-
 block/create.c            |  5 ++---
 block/mirror.c            |  2 +-
 block/stream.c            |  2 +-
 job-qmp.c                 |  5 +++--
 job.c                     | 18 ++++++------------
 tests/test-bdrv-drain.c   |  2 +-
 tests/test-blockjob-txn.c |  2 +-
 tests/test-blockjob.c     |  2 +-
 11 files changed, 26 insertions(+), 30 deletions(-)

diff --git a/include/qemu/job.h b/include/qemu/job.h
index XXXXXXX..XXXXXXX 100644
--- a/include/qemu/job.h
+++ b/include/qemu/job.h
@@ -XXX,XX +XXX,XX @@ typedef struct Job {
     /** Estimated progress_current value at the completion of the job */
     int64_t progress_total;
 
-    /** Error string for a failed job (NULL if, and only if, job->ret == 0) */
-    char *error;
-
     /** ret code passed to job_completed. */
     int ret;
 
+    /**
+     * Error object for a failed job.
+     * If job->ret is nonzero and an error object was not set, it will be set
+     * to strerror(-job->ret) during job_completed.
+     */
+    Error *err;
+
     /** The completion function that will be called when the job completes.  */
     BlockCompletionFunc *cb;
 
@@ -XXX,XX +XXX,XX @@ void job_transition_to_ready(Job *job);
 /**
  * @job: The job being completed.
  * @ret: The status code.
- * @error: The error message for a failing job (only with @ret < 0). If @ret is
- *         negative, but NULL is given for @error, strerror() is used.
  *
  * Marks @job as completed. If @ret is non-zero, the job transaction it is part
  * of is aborted. If @ret is zero, the job moves into the WAITING state. If it
  * is the last job to complete in its transaction, all jobs in the transaction
  * move from WAITING to PENDING.
  */
-void job_completed(Job *job, int ret, Error *error);
+void job_completed(Job *job, int ret);
 
 /** Asynchronously complete the specified @job. */
 void job_complete(Job *job, Error **errp);
diff --git a/block/backup.c b/block/backup.c
index XXXXXXX..XXXXXXX 100644
--- a/block/backup.c
+++ b/block/backup.c
@@ -XXX,XX +XXX,XX @@ static void backup_complete(Job *job, void *opaque)
 {
     BackupCompleteData *data = opaque;
 
-    job_completed(job, data->ret, NULL);
+    job_completed(job, data->ret);
     g_free(data);
 }
 
diff --git a/block/commit.c b/block/commit.c
index XXXXXXX..XXXXXXX 100644
--- a/block/commit.c
+++ b/block/commit.c
@@ -XXX,XX +XXX,XX @@ static void commit_complete(Job *job, void *opaque)
      * bdrv_set_backing_hd() to fail. */
     block_job_remove_all_bdrv(bjob);
 
-    job_completed(job, ret, NULL);
+    job_completed(job, ret);
     g_free(data);
 
     /* If bdrv_drop_intermediate() didn't already do that, remove the commit
diff --git a/block/create.c b/block/create.c
index XXXXXXX..XXXXXXX 100644
--- a/block/create.c
+++ b/block/create.c
@@ -XXX,XX +XXX,XX @@ typedef struct BlockdevCreateJob {
     BlockDriver *drv;
     BlockdevCreateOptions *opts;
     int ret;
-    Error *err;
 } BlockdevCreateJob;
 
 static void blockdev_create_complete(Job *job, void *opaque)
 {
     BlockdevCreateJob *s = container_of(job, BlockdevCreateJob, common);
 
-    job_completed(job, s->ret, s->err);
+    job_completed(job, s->ret);
 }
 
 static int coroutine_fn blockdev_create_run(Job *job, Error **errp)
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn blockdev_create_run(Job *job, Error **errp)
     BlockdevCreateJob *s = container_of(job, BlockdevCreateJob, common);
 
     job_progress_set_remaining(&s->common, 1);
-    s->ret = s->drv->bdrv_co_create(s->opts, &s->err);
+    s->ret = s->drv->bdrv_co_create(s->opts, errp);
     job_progress_update(&s->common, 1);
 
     qapi_free_BlockdevCreateOptions(s->opts);
diff --git a/block/mirror.c b/block/mirror.c
index XXXXXXX..XXXXXXX 100644
--- a/block/mirror.c
+++ b/block/mirror.c
@@ -XXX,XX +XXX,XX @@ static void mirror_exit(Job *job, void *opaque)
     blk_insert_bs(bjob->blk, mirror_top_bs, &error_abort);
 
     bs_opaque->job = NULL;
-    job_completed(job, data->ret, NULL);
+    job_completed(job, data->ret);
 
     g_free(data);
     bdrv_drained_end(src);
diff --git a/block/stream.c b/block/stream.c
index XXXXXXX..XXXXXXX 100644
--- a/block/stream.c
+++ b/block/stream.c
@@ -XXX,XX +XXX,XX @@ out:
     }
 
     g_free(s->backing_file_str);
-    job_completed(job, data->ret, NULL);
+    job_completed(job, data->ret);
     g_free(data);
 }
 
diff --git a/job-qmp.c b/job-qmp.c
index XXXXXXX..XXXXXXX 100644
--- a/job-qmp.c
+++ b/job-qmp.c
@@ -XXX,XX +XXX,XX @@ static JobInfo *job_query_single(Job *job, Error **errp)
         .status             = job->status,
         .current_progress   = job->progress_current,
         .total_progress     = job->progress_total,
-        .has_error          = !!job->error,
-        .error              = g_strdup(job->error),
+        .has_error          = !!job->err,
+        .error              = job->err ? \
+                              g_strdup(error_get_pretty(job->err)) : NULL,
     };
 
     return info;
diff --git a/job.c b/job.c
index XXXXXXX..XXXXXXX 100644
--- a/job.c
+++ b/job.c
@@ -XXX,XX +XXX,XX @@ void job_unref(Job *job)
 
         QLIST_REMOVE(job, job_list);
 
-        g_free(job->error);
+        error_free(job->err);
         g_free(job->id);
         g_free(job);
     }
@@ -XXX,XX +XXX,XX @@ static void coroutine_fn job_co_entry(void *opaque)
 
     assert(job && job->driver && job->driver->run);
     job_pause_point(job);
-    job->ret = job->driver->run(job, NULL);
+    job->ret = job->driver->run(job, &job->err);
 }
 
 
@@ -XXX,XX +XXX,XX @@ static void job_update_rc(Job *job)
         job->ret = -ECANCELED;
     }
     if (job->ret) {
-        if (!job->error) {
-            job->error = g_strdup(strerror(-job->ret));
+        if (!job->err) {
+            error_setg(&job->err, "%s", strerror(-job->ret));
         }
         job_state_transition(job, JOB_STATUS_ABORTING);
     }
@@ -XXX,XX +XXX,XX @@ static void job_completed_txn_success(Job *job)
     }
 }
 
-void job_completed(Job *job, int ret, Error *error)
+void job_completed(Job *job, int ret)
 {
     assert(job && job->txn && !job_is_completed(job));
 
     job->ret = ret;
-    if (error) {
-        assert(job->ret < 0);
-        job->error = g_strdup(error_get_pretty(error));
-        error_free(error);
-    }
-
     job_update_rc(job);
     trace_job_completed(job, ret, job->ret);
     if (job->ret) {
@@ -XXX,XX +XXX,XX @@ void job_cancel(Job *job, bool force)
     }
     job_cancel_async(job, force);
     if (!job_started(job)) {
-        job_completed(job, -ECANCELED, NULL);
+        job_completed(job, -ECANCELED);
     } else if (job->deferred_to_main_loop) {
         job_completed_txn_abort(job);
     } else {
diff --git a/tests/test-bdrv-drain.c b/tests/test-bdrv-drain.c
index XXXXXXX..XXXXXXX 100644
--- a/tests/test-bdrv-drain.c
+++ b/tests/test-bdrv-drain.c
@@ -XXX,XX +XXX,XX @@ typedef struct TestBlockJob {
 
 static void test_job_completed(Job *job, void *opaque)
 {
-    job_completed(job, 0, NULL);
+    job_completed(job, 0);
 }
 
 static int coroutine_fn test_job_run(Job *job, Error **errp)
diff --git a/tests/test-blockjob-txn.c b/tests/test-blockjob-txn.c
index XXXXXXX..XXXXXXX 100644
--- a/tests/test-blockjob-txn.c
+++ b/tests/test-blockjob-txn.c
@@ -XXX,XX +XXX,XX @@ static void test_block_job_complete(Job *job, void *opaque)
         rc = -ECANCELED;
     }
 
-    job_completed(job, rc, NULL);
+    job_completed(job, rc);
     bdrv_unref(bs);
 }
 
diff --git a/tests/test-blockjob.c b/tests/test-blockjob.c
index XXXXXXX..XXXXXXX 100644
--- a/tests/test-blockjob.c
+++ b/tests/test-blockjob.c
@@ -XXX,XX +XXX,XX @@ static void cancel_job_completed(Job *job, void *opaque)
 {
     CancelJob *s = opaque;
     s->completed = true;
-    job_completed(job, 0, NULL);
+    job_completed(job, 0);
 }
 
 static void cancel_job_complete(Job *job, Error **errp)
-- 
2.17.1

From: John Snow <jsnow@redhat.com>

All jobs do the same thing when they leave their running loop:
- Store the return code in a structure
- wait to receive this structure in the main thread
- signal job completion via job_completed

Few jobs do anything beyond exactly this. Consolidate this exit
logic for a net reduction in SLOC.

More seriously, when we utilize job_defer_to_main_loop_bh to call
a function that calls job_completed, job_finalize_single will run
in a context where it has recursively taken the aio_context lock,
which can cause hangs if it puts down a reference that causes a flush.

You can observe this in practice by looking at mirror_exit's careful
placement of job_completed and bdrv_unref calls.

If we centralize job exiting, we can signal job completion from outside
of the aio_context, which should allow for job cleanup code to run with
only one lock, which makes cleanup callbacks less tricky to write.

Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Message-id: 20180830015734.19765-4-jsnow@redhat.com
Reviewed-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Max Reitz <mreitz@redhat.com>
---
 include/qemu/job.h | 11 +++++++++++
 job.c              | 18 ++++++++++++++++++
 2 files changed, 29 insertions(+)

diff --git a/include/qemu/job.h b/include/qemu/job.h
index XXXXXXX..XXXXXXX 100644
--- a/include/qemu/job.h
+++ b/include/qemu/job.h
@@ -XXX,XX +XXX,XX @@ struct JobDriver {
      */
     void (*drain)(Job *job);
 
+    /**
+     * If the callback is not NULL, exit will be invoked from the main thread
+     * when the job's coroutine has finished, but before transactional
+     * convergence; before @prepare or @abort.
+     *
+     * FIXME TODO: This callback is only temporary to transition remaining jobs
+     * to prepare/commit/abort/clean callbacks and will be removed before 3.1.
+     * is released.
+     */
+    void (*exit)(Job *job);
+
     /**
      * If the callback is not NULL, prepare will be invoked when all the jobs
      * belonging to the same transaction complete; or upon this job's completion
diff --git a/job.c b/job.c
index XXXXXXX..XXXXXXX 100644
--- a/job.c
+++ b/job.c
@@ -XXX,XX +XXX,XX @@ void job_drain(Job *job)
     }
 }
 
+static void job_exit(void *opaque)
+{
+    Job *job = (Job *)opaque;
+    AioContext *aio_context = job->aio_context;
+
+    if (job->driver->exit) {
+        aio_context_acquire(aio_context);
+        job->driver->exit(job);
+        aio_context_release(aio_context);
+    }
+    job_completed(job, job->ret);
+}
 
 /**
  * All jobs must allow a pause point before entering their job proper. This
@@ -XXX,XX +XXX,XX @@ static void coroutine_fn job_co_entry(void *opaque)
     assert(job && job->driver && job->driver->run);
     job_pause_point(job);
     job->ret = job->driver->run(job, &job->err);
+    if (!job->deferred_to_main_loop) {
+        job->deferred_to_main_loop = true;
+        aio_bh_schedule_oneshot(qemu_get_aio_context(),
+                                job_exit,
+                                job);
+    }
 }
 
 
-- 
2.17.1

From: John Snow <jsnow@redhat.com>

Change the manual deferment to commit_complete into the implicit
callback to job_exit, renaming commit_complete to commit_exit.

This conversion does change the timing of when job_completed is
called to after the bdrv_replace_node and bdrv_unref calls, which
could have implications for bjob->blk which will now be put down
after this cleanup.

Kevin highlights that we did not take any permissions for that backend
at job creation time, so it is safe to reorder these operations.

Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Message-id: 20180830015734.19765-5-jsnow@redhat.com
Reviewed-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Max Reitz <mreitz@redhat.com>
---
 block/commit.c | 22 +++++-----------------
 1 file changed, 5 insertions(+), 17 deletions(-)

diff --git a/block/commit.c b/block/commit.c
index XXXXXXX..XXXXXXX 100644
--- a/block/commit.c
+++ b/block/commit.c
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn commit_populate(BlockBackend *bs, BlockBackend *base,
     return 0;
 }
 
-typedef struct {
-    int ret;
-} CommitCompleteData;
-
-static void commit_complete(Job *job, void *opaque)
+static void commit_exit(Job *job)
 {
     CommitBlockJob *s = container_of(job, CommitBlockJob, common.job);
     BlockJob *bjob = &s->common;
-    CommitCompleteData *data = opaque;
     BlockDriverState *top = blk_bs(s->top);
     BlockDriverState *base = blk_bs(s->base);
     BlockDriverState *commit_top_bs = s->commit_top_bs;
-    int ret = data->ret;
     bool remove_commit_top_bs = false;
 
     /* Make sure commit_top_bs and top stay around until bdrv_replace_node() */
@@ -XXX,XX +XXX,XX @@ static void commit_complete(Job *job, void *opaque)
      * the normal backing chain can be restored. */
     blk_unref(s->base);
 
-    if (!job_is_cancelled(job) && ret == 0) {
+    if (!job_is_cancelled(job) && job->ret == 0) {
         /* success */
-        ret = bdrv_drop_intermediate(s->commit_top_bs, base,
-                                     s->backing_file_str);
+        job->ret = bdrv_drop_intermediate(s->commit_top_bs, base,
+                                          s->backing_file_str);
     } else {
         /* XXX Can (or should) we somehow keep 'consistent read' blocked even
          * after the failed/cancelled commit job is gone? If we already wrote
@@ -XXX,XX +XXX,XX @@ static void commit_complete(Job *job, void *opaque)
      * bdrv_set_backing_hd() to fail. */
     block_job_remove_all_bdrv(bjob);
 
-    job_completed(job, ret);
-    g_free(data);
-
     /* If bdrv_drop_intermediate() didn't already do that, remove the commit
      * filter driver from the backing chain. Do this as the final step so that
      * the 'consistent read' permission can be granted.  */
@@ -XXX,XX +XXX,XX @@ static void commit_complete(Job *job, void *opaque)
 static int coroutine_fn commit_run(Job *job, Error **errp)
 {
     CommitBlockJob *s = container_of(job, CommitBlockJob, common.job);
-    CommitCompleteData *data;
     int64_t offset;
     uint64_t delay_ns = 0;
     int ret = 0;
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn commit_run(Job *job, Error **errp)
 out:
     qemu_vfree(buf);
 
-    data = g_malloc(sizeof(*data));
-    data->ret = ret;
-    job_defer_to_main_loop(&s->common.job, commit_complete, data);
     return ret;
 }
 
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver commit_job_driver = {
         .user_resume   = block_job_user_resume,
         .drain         = block_job_drain,
         .run           = commit_run,
+        .exit          = commit_exit,
     },
 };
 
-- 
2.17.1

From: John Snow <jsnow@redhat.com>

Change the manual deferment to mirror_exit into the implicit
callback to job_exit and the mirror_exit callback.

This does change the order of some bdrv_unref calls and job_completed,
but thanks to the new context in which we call .exit, this is safe to
defer the possible flushing of any nodes to the job_finalize_single
cleanup stage.

Signed-off-by: John Snow <jsnow@redhat.com>
Message-id: 20180830015734.19765-6-jsnow@redhat.com
Reviewed-by: Max Reitz <mreitz@redhat.com>
Reviewed-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Max Reitz <mreitz@redhat.com>
---
 block/mirror.c | 29 +++++++++++------------------
 1 file changed, 11 insertions(+), 18 deletions(-)

diff --git a/block/mirror.c b/block/mirror.c
index XXXXXXX..XXXXXXX 100644
--- a/block/mirror.c
+++ b/block/mirror.c
@@ -XXX,XX +XXX,XX @@ static void mirror_wait_for_all_io(MirrorBlockJob *s)
     }
 }
 
-typedef struct {
-    int ret;
-} MirrorExitData;
-
-static void mirror_exit(Job *job, void *opaque)
+static void mirror_exit(Job *job)
 {
     MirrorBlockJob *s = container_of(job, MirrorBlockJob, common.job);
     BlockJob *bjob = &s->common;
-    MirrorExitData *data = opaque;
     MirrorBDSOpaque *bs_opaque = s->mirror_top_bs->opaque;
     AioContext *replace_aio_context = NULL;
     BlockDriverState *src = s->mirror_top_bs->backing->bs;
     BlockDriverState *target_bs = blk_bs(s->target);
     BlockDriverState *mirror_top_bs = s->mirror_top_bs;
     Error *local_err = NULL;
+    int ret = job->ret;
 
     bdrv_release_dirty_bitmap(src, s->dirty_bitmap);
 
-    /* Make sure that the source BDS doesn't go away before we called
-     * job_completed(). */
+    /* Make sure that the source BDS doesn't go away during bdrv_replace_node,
+     * before we can call bdrv_drained_end */
     bdrv_ref(src);
     bdrv_ref(mirror_top_bs);
     bdrv_ref(target_bs);
@@ -XXX,XX +XXX,XX @@ static void mirror_exit(Job *job, void *opaque)
             bdrv_set_backing_hd(target_bs, backing, &local_err);
             if (local_err) {
                 error_report_err(local_err);
-                data->ret = -EPERM;
+                ret = -EPERM;
             }
         }
     }
@@ -XXX,XX +XXX,XX @@ static void mirror_exit(Job *job, void *opaque)
         aio_context_acquire(replace_aio_context);
     }
 
-    if (s->should_complete && data->ret == 0) {
+    if (s->should_complete && ret == 0) {
         BlockDriverState *to_replace = src;
         if (s->to_replace) {
             to_replace = s->to_replace;
@@ -XXX,XX +XXX,XX @@ static void mirror_exit(Job *job, void *opaque)
         bdrv_drained_end(target_bs);
         if (local_err) {
             error_report_err(local_err);
-            data->ret = -EPERM;
+            ret = -EPERM;
         }
     }
     if (s->to_replace) {
@@ -XXX,XX +XXX,XX @@ static void mirror_exit(Job *job, void *opaque)
     blk_insert_bs(bjob->blk, mirror_top_bs, &error_abort);
 
     bs_opaque->job = NULL;
-    job_completed(job, data->ret);
 
-    g_free(data);
     bdrv_drained_end(src);
     bdrv_unref(mirror_top_bs);
     bdrv_unref(src);
+
+    job->ret = ret;
 }
 
 static void mirror_throttle(MirrorBlockJob *s)
@@ -XXX,XX +XXX,XX @@ static int mirror_flush(MirrorBlockJob *s)
 static int coroutine_fn mirror_run(Job *job, Error **errp)
 {
     MirrorBlockJob *s = container_of(job, MirrorBlockJob, common.job);
-    MirrorExitData *data;
     BlockDriverState *bs = s->mirror_top_bs->backing->bs;
     BlockDriverState *target_bs = blk_bs(s->target);
     bool need_drain = true;
@@ -XXX,XX +XXX,XX @@ immediate_exit:
     g_free(s->in_flight_bitmap);
     bdrv_dirty_iter_free(s->dbi);
 
-    data = g_malloc(sizeof(*data));
-    data->ret = ret;
-
     if (need_drain) {
         bdrv_drained_begin(bs);
     }
 
-    job_defer_to_main_loop(&s->common.job, mirror_exit, data);
     return ret;
 }
 
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver mirror_job_driver = {
         .user_resume            = block_job_user_resume,
         .drain                  = block_job_drain,
         .run                    = mirror_run,
+        .exit                   = mirror_exit,
         .pause                  = mirror_pause,
         .complete               = mirror_complete,
     },
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver commit_active_job_driver = {
         .user_resume            = block_job_user_resume,
         .drain                  = block_job_drain,
         .run                    = mirror_run,
+        .exit                   = mirror_exit,
         .pause                  = mirror_pause,
         .complete               = mirror_complete,
     },
-- 
2.17.1

From: John Snow <jsnow@redhat.com>

Utilize the job_exit shim by not calling job_defer_to_main_loop, and
where applicable, converting the deferred callback into the job_exit
callback.

This converts backup, stream, create, and the unit tests all at once.
Most of these jobs do not see any changes to the order in which they
clean up their resources, except the test-blockjob-txn test, which
now puts down its bs before job_completed is called.

This is safe for the same reason the reordering in the mirror job is
safe, because job_completed no longer runs under two locks, making
the unref safe even if it causes a flush.

Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Message-id: 20180830015734.19765-7-jsnow@redhat.com
Signed-off-by: Max Reitz <mreitz@redhat.com>
---
 block/backup.c            | 16 ----------------
 block/create.c            | 14 +++-----------
 block/stream.c            | 22 +++++++---------------
 tests/test-bdrv-drain.c   |  6 ------
 tests/test-blockjob-txn.c | 11 ++---------
 tests/test-blockjob.c     | 10 ++++------
 6 files changed, 16 insertions(+), 63 deletions(-)

diff --git a/block/backup.c b/block/backup.c
index XXXXXXX..XXXXXXX 100644
--- a/block/backup.c
+++ b/block/backup.c
@@ -XXX,XX +XXX,XX @@ static BlockErrorAction backup_error_action(BackupBlockJob *job,
     }
 }
 
-typedef struct {
-    int ret;
-} BackupCompleteData;
-
-static void backup_complete(Job *job, void *opaque)
-{
-    BackupCompleteData *data = opaque;
-
-    job_completed(job, data->ret);
-    g_free(data);
-}
-
 static bool coroutine_fn yield_and_check(BackupBlockJob *job)
 {
     uint64_t delay_ns;
@@ -XXX,XX +XXX,XX @@ static void backup_incremental_init_copy_bitmap(BackupBlockJob *job)
 static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
 {
     BackupBlockJob *job = container_of(opaque_job, BackupBlockJob, common.job);
-    BackupCompleteData *data;
     BlockDriverState *bs = blk_bs(job->common.blk);
     int64_t offset, nb_clusters;
     int ret = 0;
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
     qemu_co_rwlock_unlock(&job->flush_rwlock);
     hbitmap_free(job->copy_bitmap);
 
-    data = g_malloc(sizeof(*data));
-    data->ret = ret;
-    job_defer_to_main_loop(&job->common.job, backup_complete, data);
     return ret;
 }
 
diff --git a/block/create.c b/block/create.c
index XXXXXXX..XXXXXXX 100644
--- a/block/create.c
+++ b/block/create.c
@@ -XXX,XX +XXX,XX @@ typedef struct BlockdevCreateJob {
     Job common;
     BlockDriver *drv;
     BlockdevCreateOptions *opts;
-    int ret;
 } BlockdevCreateJob;
 
-static void blockdev_create_complete(Job *job, void *opaque)
-{
-    BlockdevCreateJob *s = container_of(job, BlockdevCreateJob, common);
-
-    job_completed(job, s->ret);
-}
-
 static int coroutine_fn blockdev_create_run(Job *job, Error **errp)
 {
     BlockdevCreateJob *s = container_of(job, BlockdevCreateJob, common);
+    int ret;
 
     job_progress_set_remaining(&s->common, 1);
-    s->ret = s->drv->bdrv_co_create(s->opts, errp);
+    ret = s->drv->bdrv_co_create(s->opts, errp);
     job_progress_update(&s->common, 1);
 
     qapi_free_BlockdevCreateOptions(s->opts);
-    job_defer_to_main_loop(&s->common, blockdev_create_complete, NULL);
 
-    return s->ret;
+    return ret;
 }
 
 static const JobDriver blockdev_create_job_driver = {
diff --git a/block/stream.c b/block/stream.c
index XXXXXXX..XXXXXXX 100644
--- a/block/stream.c
+++ b/block/stream.c
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn stream_populate(BlockBackend *blk,
     return blk_co_preadv(blk, offset, qiov.size, &qiov, BDRV_REQ_COPY_ON_READ);
 }
 
-typedef struct {
-    int ret;
-} StreamCompleteData;
-
-static void stream_complete(Job *job, void *opaque)
+static void stream_exit(Job *job)
 {
     StreamBlockJob *s = container_of(job, StreamBlockJob, common.job);
     BlockJob *bjob = &s->common;
-    StreamCompleteData *data = opaque;
     BlockDriverState *bs = blk_bs(bjob->blk);
     BlockDriverState *base = s->base;
     Error *local_err = NULL;
+    int ret = job->ret;
 
-    if (!job_is_cancelled(job) && bs->backing && data->ret == 0) {
+    if (!job_is_cancelled(job) && bs->backing && ret == 0) {
         const char *base_id = NULL, *base_fmt = NULL;
         if (base) {
             base_id = s->backing_file_str;
@@ -XXX,XX +XXX,XX @@ static void stream_complete(Job *job, void *opaque)
                 base_fmt = base->drv->format_name;
             }
         }
-        data->ret = bdrv_change_backing_file(bs, base_id, base_fmt);
+        ret = bdrv_change_backing_file(bs, base_id, base_fmt);
         bdrv_set_backing_hd(bs, base, &local_err);
         if (local_err) {
             error_report_err(local_err);
-            data->ret = -EPERM;
+            ret = -EPERM;
             goto out;
         }
     }
@@ -XXX,XX +XXX,XX @@ out:
     }
 
     g_free(s->backing_file_str);
-    job_completed(job, data->ret);
-    g_free(data);
+    job->ret = ret;
 }
 
 static int coroutine_fn stream_run(Job *job, Error **errp)
 {
     StreamBlockJob *s = container_of(job, StreamBlockJob, common.job);
-    StreamCompleteData *data;
     BlockBackend *blk = s->common.blk;
     BlockDriverState *bs = blk_bs(blk);
     BlockDriverState *base = s->base;
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn stream_run(Job *job, Error **errp)
 
 out:
     /* Modify backing chain and close BDSes in main loop */
-    data = g_malloc(sizeof(*data));
-    data->ret = ret;
-    job_defer_to_main_loop(&s->common.job, stream_complete, data);
     return ret;
 }
 
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver stream_job_driver = {
         .job_type      = JOB_TYPE_STREAM,
         .free          = block_job_free,
         .run           = stream_run,
+        .exit          = stream_exit,
         .user_resume   = block_job_user_resume,
         .drain         = block_job_drain,
     },
diff --git a/tests/test-bdrv-drain.c b/tests/test-bdrv-drain.c
index XXXXXXX..XXXXXXX 100644
--- a/tests/test-bdrv-drain.c
+++ b/tests/test-bdrv-drain.c
@@ -XXX,XX +XXX,XX @@ typedef struct TestBlockJob {
     bool should_complete;
 } TestBlockJob;
 
-static void test_job_completed(Job *job, void *opaque)
-{
-    job_completed(job, 0);
-}
-
 static int coroutine_fn test_job_run(Job *job, Error **errp)
 {
     TestBlockJob *s = container_of(job, TestBlockJob, common.job);
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn test_job_run(Job *job, Error **errp)
         job_pause_point(&s->common.job);
     }
 
-    job_defer_to_main_loop(&s->common.job, test_job_completed, NULL);
     return 0;
 }
 
diff --git a/tests/test-blockjob-txn.c b/tests/test-blockjob-txn.c
index XXXXXXX..XXXXXXX 100644
--- a/tests/test-blockjob-txn.c
+++ b/tests/test-blockjob-txn.c
@@ -XXX,XX +XXX,XX @@ typedef struct {
     int *result;
 } TestBlockJob;
 
-static void test_block_job_complete(Job *job, void *opaque)
+static void test_block_job_exit(Job *job)
 {
     BlockJob *bjob = container_of(job, BlockJob, job);
     BlockDriverState *bs = blk_bs(bjob->blk);
-    int rc = (intptr_t)opaque;
 
-    if (job_is_cancelled(job)) {
-        rc = -ECANCELED;
-    }
-
-    job_completed(job, rc);
     bdrv_unref(bs);
 }
 
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn test_block_job_run(Job *job, Error **errp)
         }
     }
 
-    job_defer_to_main_loop(job, test_block_job_complete,
-                           (void *)(intptr_t)s->rc);
     return s->rc;
 }
 
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver test_block_job_driver = {
         .user_resume   = block_job_user_resume,
         .drain         = block_job_drain,
         .run           = test_block_job_run,
+        .exit          = test_block_job_exit,
     },
 };
 
diff --git a/tests/test-blockjob.c b/tests/test-blockjob.c
index XXXXXXX..XXXXXXX 100644
--- a/tests/test-blockjob.c
+++ b/tests/test-blockjob.c
@@ -XXX,XX +XXX,XX @@ typedef struct CancelJob {
     bool completed;
 } CancelJob;
 
-static void cancel_job_completed(Job *job, void *opaque)
+static void cancel_job_exit(Job *job)
 {
-    CancelJob *s = opaque;
+    CancelJob *s = container_of(job, CancelJob, common.job);
     s->completed = true;
-    job_completed(job, 0);
 }
 
 static void cancel_job_complete(Job *job, Error **errp)
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn cancel_job_run(Job *job, Error **errp)
 
     while (!s->should_complete) {
         if (job_is_cancelled(&s->common.job)) {
-            goto defer;
+            return 0;
         }
 
         if (!job_is_ready(&s->common.job) && s->should_converge) {
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn cancel_job_run(Job *job, Error **errp)
         job_sleep_ns(&s->common.job, 100000);
     }
 
- defer:
-    job_defer_to_main_loop(&s->common.job, cancel_job_completed, s);
     return 0;
 }
 
@@ -XXX,XX +XXX,XX @@ static const BlockJobDriver test_cancel_driver = {
         .user_resume   = block_job_user_resume,
         .drain         = block_job_drain,
         .run           = cancel_job_run,
+        .exit          = cancel_job_exit,
         .complete      = cancel_job_complete,
     },
 };
-- 
2.17.1

From: John Snow <jsnow@redhat.com>

Rename opaque_job to job to be consistent with other job implementations.
Rename 'job', the BackupBlockJob object, to 's' to also be consistent.

Suggested-by: Eric Blake <eblake@redhat.com>
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Message-id: 20180830015734.19765-8-jsnow@redhat.com
Signed-off-by: Max Reitz <mreitz@redhat.com>
---
 block/backup.c | 62 +++++++++++++++++++++++++-------------------------
 1 file changed, 31 insertions(+), 31 deletions(-)

diff --git a/block/backup.c b/block/backup.c
index XXXXXXX..XXXXXXX 100644
--- a/block/backup.c
+++ b/block/backup.c
@@ -XXX,XX +XXX,XX @@ static void backup_incremental_init_copy_bitmap(BackupBlockJob *job)
     bdrv_dirty_iter_free(dbi);
 }
 
-static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
+static int coroutine_fn backup_run(Job *job, Error **errp)
 {
-    BackupBlockJob *job = container_of(opaque_job, BackupBlockJob, common.job);
-    BlockDriverState *bs = blk_bs(job->common.blk);
+    BackupBlockJob *s = container_of(job, BackupBlockJob, common.job);
+    BlockDriverState *bs = blk_bs(s->common.blk);
     int64_t offset, nb_clusters;
     int ret = 0;
 
-    QLIST_INIT(&job->inflight_reqs);
-    qemu_co_rwlock_init(&job->flush_rwlock);
+    QLIST_INIT(&s->inflight_reqs);
+    qemu_co_rwlock_init(&s->flush_rwlock);
 
-    nb_clusters = DIV_ROUND_UP(job->len, job->cluster_size);
-    job_progress_set_remaining(&job->common.job, job->len);
+    nb_clusters = DIV_ROUND_UP(s->len, s->cluster_size);
+    job_progress_set_remaining(job, s->len);
 
-    job->copy_bitmap = hbitmap_alloc(nb_clusters, 0);
-    if (job->sync_mode == MIRROR_SYNC_MODE_INCREMENTAL) {
-        backup_incremental_init_copy_bitmap(job);
+    s->copy_bitmap = hbitmap_alloc(nb_clusters, 0);
+    if (s->sync_mode == MIRROR_SYNC_MODE_INCREMENTAL) {
+        backup_incremental_init_copy_bitmap(s);
     } else {
-        hbitmap_set(job->copy_bitmap, 0, nb_clusters);
+        hbitmap_set(s->copy_bitmap, 0, nb_clusters);
     }
 
 
-    job->before_write.notify = backup_before_write_notify;
-    bdrv_add_before_write_notifier(bs, &job->before_write);
+    s->before_write.notify = backup_before_write_notify;
+    bdrv_add_before_write_notifier(bs, &s->before_write);
 
-    if (job->sync_mode == MIRROR_SYNC_MODE_NONE) {
+    if (s->sync_mode == MIRROR_SYNC_MODE_NONE) {
         /* All bits are set in copy_bitmap to allow any cluster to be copied.
          * This does not actually require them to be copied. */
-        while (!job_is_cancelled(&job->common.job)) {
+        while (!job_is_cancelled(job)) {
             /* Yield until the job is cancelled.  We just let our before_write
              * notify callback service CoW requests. */
-            job_yield(&job->common.job);
+            job_yield(job);
         }
-    } else if (job->sync_mode == MIRROR_SYNC_MODE_INCREMENTAL) {
-        ret = backup_run_incremental(job);
+    } else if (s->sync_mode == MIRROR_SYNC_MODE_INCREMENTAL) {
+        ret = backup_run_incremental(s);
     } else {
         /* Both FULL and TOP SYNC_MODE's require copying.. */
-        for (offset = 0; offset < job->len;
-             offset += job->cluster_size) {
+        for (offset = 0; offset < s->len;
+             offset += s->cluster_size) {
             bool error_is_read;
             int alloced = 0;
 
-            if (yield_and_check(job)) {
+            if (yield_and_check(s)) {
                 break;
             }
 
-            if (job->sync_mode == MIRROR_SYNC_MODE_TOP) {
+            if (s->sync_mode == MIRROR_SYNC_MODE_TOP) {
                 int i;
                 int64_t n;
 
                 /* Check to see if these blocks are already in the
                  * backing file. */
 
-                for (i = 0; i < job->cluster_size;) {
+                for (i = 0; i < s->cluster_size;) {
                     /* bdrv_is_allocated() only returns true/false based
                      * on the first set of sectors it comes across that
                      * are are all in the same state.
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
                      * needed but at some point that is always the case. */
                     alloced =
                         bdrv_is_allocated(bs, offset + i,
-                                          job->cluster_size - i, &n);
+                                          s->cluster_size - i, &n);
                     i += n;
 
                     if (alloced || n == 0) {
@@ -XXX,XX +XXX,XX @@ static int coroutine_fn backup_run(Job *opaque_job, Error **errp)
             if (alloced < 0) {
                 ret = alloced;
             } else {
-                ret = backup_do_cow(job, offset, job->cluster_size,
+                ret = backup_do_cow(s, offset, s->cluster_size,
                                     &error_is_read, false);
             }
             if (ret < 0) {
                 /* Depending on error action, fail now or retry cluster */
                 BlockErrorAction action =
-                    backup_error_action(job, error_is_read, -ret);
+                    backup_error_action(s, error_is_read, -ret);
                 if (action == BLOCK_ERROR_ACTION_REPORT) {
                     break;
                 } else {
-                    offset -= job->cluster_size;
+                    offset -= s->cluster_size;
                     continue;
                 }
             }
         }
     }
 
-    notifier_with_return_remove(&job->before_write);
+    notifier_with_return_remove(&s->before_write);
 
     /* wait until pending backup_do_cow() calls have completed */
-    qemu_co_rwlock_wrlock(&job->flush_rwlock);
-    qemu_co_rwlock_unlock(&job->flush_rwlock);
-    hbitmap_free(job->copy_bitmap);
+    qemu_co_rwlock_wrlock(&s->flush_rwlock);
+    qemu_co_rwlock_unlock(&s->flush_rwlock);
+    hbitmap_free(s->copy_bitmap);
 
     return ret;
 }
-- 
2.17.1

From: John Snow <jsnow@redhat.com>

Jobs are now expected to return their retcode on the stack, from the
.run callback, so we can remove that argument.

job_cancel does not need to set -ECANCELED because job_completed will
update the return code itself if the job was canceled.

While we're here, make job_completed static to job.c and remove it from
job.h; move the documentation of return code to the .run() callback and
to the job->ret property, accordingly.

Signed-off-by: John Snow <jsnow@redhat.com>
Message-id: 20180830015734.19765-9-jsnow@redhat.com
Reviewed-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Max Reitz <mreitz@redhat.com>
---
 include/qemu/job.h | 28 +++++++++++++++-------------
 job.c              | 11 ++++++-----
 trace-events       |  2 +-
 3 files changed, 22 insertions(+), 19 deletions(-)

From: John Snow <jsnow@redhat.com>

Now that the job infrastructure is handling the job_completed call for
all implemented jobs, we can remove the interface that allowed jobs to
schedule their own completion.

Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Max Reitz <mreitz@redhat.com>
Message-id: 20180830015734.19765-10-jsnow@redhat.com
Signed-off-by: Max Reitz <mreitz@redhat.com>
---
 include/qemu/job.h | 17 -----------------
 job.c              | 40 ++--------------------------------------
 2 files changed, 2 insertions(+), 55 deletions(-)

diff --git a/include/qemu/job.h b/include/qemu/job.h
index XXXXXXX..XXXXXXX 100644
--- a/include/qemu/job.h
+++ b/include/qemu/job.h
@@ -XXX,XX +XXX,XX @@ void job_finalize(Job *job, Error **errp);
  */
 void job_dismiss(Job **job, Error **errp);
 
-typedef void JobDeferToMainLoopFn(Job *job, void *opaque);
-
-/**
- * @job: The job
- * @fn: The function to run in the main loop
- * @opaque: The opaque value that is passed to @fn
- *
- * This function must be called by the main job coroutine just before it
- * returns.  @fn is executed in the main loop with the job AioContext acquired.
- *
- * Block jobs must call bdrv_unref(), bdrv_close(), and anything that uses
- * bdrv_drain_all() in the main loop.
- *
- * The @job AioContext is held while @fn executes.
- */
-void job_defer_to_main_loop(Job *job, JobDeferToMainLoopFn *fn, void *opaque);
-
 /**
  * Synchronously finishes the given @job. If @finish is given, it is called to
  * trigger completion or cancellation of the job.
diff --git a/job.c b/job.c
index XXXXXXX..XXXXXXX 100644
--- a/job.c
+++ b/job.c
@@ -XXX,XX +XXX,XX @@ static void coroutine_fn job_co_entry(void *opaque)
     assert(job && job->driver && job->driver->run);
     job_pause_point(job);
     job->ret = job->driver->run(job, &job->err);
-    if (!job->deferred_to_main_loop) {
-        job->deferred_to_main_loop = true;
-        aio_bh_schedule_oneshot(qemu_get_aio_context(),
-                                job_exit,
-                                job);
-    }
+    job->deferred_to_main_loop = true;
+    aio_bh_schedule_oneshot(qemu_get_aio_context(), job_exit, job);
 }
 
 
@@ -XXX,XX +XXX,XX @@ void job_complete(Job *job, Error **errp)
     job->driver->complete(job, errp);
 }
 
-
-typedef struct {
-    Job *job;
-    JobDeferToMainLoopFn *fn;
-    void *opaque;
-} JobDeferToMainLoopData;
-
-static void job_defer_to_main_loop_bh(void *opaque)
-{
-    JobDeferToMainLoopData *data = opaque;
-    Job *job = data->job;
-    AioContext *aio_context = job->aio_context;
-
-    aio_context_acquire(aio_context);
-    data->fn(data->job, data->opaque);
-    aio_context_release(aio_context);
-
-    g_free(data);
-}
-
-void job_defer_to_main_loop(Job *job, JobDeferToMainLoopFn *fn, void *opaque)
-{
-    JobDeferToMainLoopData *data = g_malloc(sizeof(*data));
-    data->job = job;
-    data->fn = fn;
-    data->opaque = opaque;
-    job->deferred_to_main_loop = true;
-
-    aio_bh_schedule_oneshot(qemu_get_aio_context(),
-                            job_defer_to_main_loop_bh, data);
-}
-
 int job_finish_sync(Job *job, void (*finish)(Job *, Error **errp), Error **errp)
 {
     Error *local_err = NULL;
-- 
2.17.1

From: Denis Rastyogin <gerben@altlinux.org>

This error was discovered by fuzzing qemu-img.

When ph.ext_off has a sufficiently large value, the operation
le64_to_cpu(ph.ext_off) << BDRV_SECTOR_BITS in
parallels_read_format_extension() can cause an overflow in int64_t.
This overflow triggers the assert(ext_off > 0)
check in block/parallels-ext.c: parallels_read_format_extension(),
leading to a crash.

This commit adds a check to prevent overflow when shifting ph.ext_off
by BDRV_SECTOR_BITS, ensuring that the value remains within a valid range.

Reported-by: Leonid Reviakin <L.reviakin@fobos-nt.ru>
Signed-off-by: Denis Rastyogin <gerben@altlinux.org>
Reviewed-by: Denis V. Lunev <den@openvz.org>
Message-ID: <20241212104212.513947-2-gerben@altlinux.org>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
---
 block/parallels.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/block/parallels.c b/block/parallels.c
index XXXXXXX..XXXXXXX 100644
--- a/block/parallels.c
+++ b/block/parallels.c
@@ -XXX,XX +XXX,XX @@ static int parallels_open(BlockDriverState *bs, QDict *options, int flags,
         error_setg(errp, "Catalog too large");
         return -EFBIG;
     }
+    if (le64_to_cpu(ph.ext_off) >= (INT64_MAX >> BDRV_SECTOR_BITS)) {
+        error_setg(errp, "Invalid image: Too big offset");
+        return -EFBIG;
+    }
 
     size = bat_entry_off(s->bat_size);
     s->header_size = ROUND_UP(size, bdrv_opt_mem_align(bs->file->bs));
-- 
2.48.1