Re: [virtio-comment] Writes to the Device Status field race with DEVICE_NEEDS_RESET

["Michael S. Tsirkin" <mst@redhat.com>]

On Wed, Nov 18, 2020 at 01:45:13PM +0100, Olivier Delande wrote:
> As far as I understand the Virtio 1.1 spec, a driver must not clear
> any bit in the Device Status field when it writes a non-zero value.
> How can it comply with this requirement, when the device may be
> concurrently setting DEVICE_NEEDS_RESET? There does not seem to be any
> facility to atomically set some bits and leave the others unchanged.

Good point! I guess one way to actually make it race-free is for
the device to have the DEVICE_NEEDS_RESET bit read-only, that is
unaffected by driver writes.

We can't make it a MUST since there are lots of devices out there
but we can make it a SHOULD. Luckily it is unusual for drivers to
change status after initialization and unusual for devices to
fail during initialization.

One other thing we should probably suggest is that devices that set NEED_RESET before
FEATURES_OK is set, also fail setting of FEATURES_OK.
This way at least drivers will detect the failure.
That seems like a good idea even irrespective of the races,
since lots of drivers don't handle NEED_RESET.

-- 
MST