9 #include "snapshot-interface.h"
11 #include "clockvector.h"
12 #include "cyclegraph.h"
15 #include "threads-model.h"
18 #define INITIAL_THREAD_ID 0
23 bug_message(const char *str) {
24 const char *fmt = " [BUG] %s\n";
25 msg = (char *)snapshot_malloc(strlen(fmt) + strlen(str));
26 sprintf(msg, fmt, str);
28 ~bug_message() { if (msg) snapshot_free(msg); }
31 void print() { model_print("%s", msg); }
37 * Structure for holding small ModelChecker members that should be snapshotted
39 struct model_snapshot_members {
40 model_snapshot_members() :
42 /* First thread created will have id INITIAL_THREAD_ID */
43 next_thread_id(INITIAL_THREAD_ID),
44 used_sequence_numbers(0),
49 failed_promise(false),
50 too_many_reads(false),
51 bad_synchronization(false),
55 ~model_snapshot_members() {
56 for (unsigned int i = 0; i < bugs.size(); i++)
61 ModelAction *current_action;
62 unsigned int next_thread_id;
63 modelclock_t used_sequence_numbers;
65 ModelAction *next_backtrack;
66 std::vector< bug_message *, SnapshotAlloc<bug_message *> > bugs;
67 struct execution_stats stats;
70 /** @brief Incorrectly-ordered synchronization was made */
71 bool bad_synchronization;
77 /** @brief Constructor */
78 ModelChecker::ModelChecker(struct model_params params) :
79 /* Initialize default scheduler */
81 scheduler(new Scheduler()),
83 earliest_diverge(NULL),
84 action_trace(new action_list_t()),
85 thread_map(new HashTable<int, Thread *, int>()),
86 obj_map(new HashTable<const void *, action_list_t *, uintptr_t, 4>()),
87 lock_waiters_map(new HashTable<const void *, action_list_t *, uintptr_t, 4>()),
88 condvar_waiters_map(new HashTable<const void *, action_list_t *, uintptr_t, 4>()),
89 obj_thrd_map(new HashTable<void *, std::vector<action_list_t> *, uintptr_t, 4 >()),
90 promises(new std::vector< Promise *, SnapshotAlloc<Promise *> >()),
91 futurevalues(new std::vector< struct PendingFutureValue, SnapshotAlloc<struct PendingFutureValue> >()),
92 pending_rel_seqs(new std::vector< struct release_seq *, SnapshotAlloc<struct release_seq *> >()),
93 thrd_last_action(new std::vector< ModelAction *, SnapshotAlloc<ModelAction *> >(1)),
94 node_stack(new NodeStack()),
95 priv(new struct model_snapshot_members()),
96 mo_graph(new CycleGraph())
98 /* Initialize a model-checker thread, for special ModelActions */
99 model_thread = new Thread(get_next_id());
100 thread_map->put(id_to_int(model_thread->get_id()), model_thread);
103 /** @brief Destructor */
104 ModelChecker::~ModelChecker()
106 for (unsigned int i = 0; i < get_num_threads(); i++)
107 delete thread_map->get(i);
112 delete lock_waiters_map;
113 delete condvar_waiters_map;
116 for (unsigned int i = 0; i < promises->size(); i++)
117 delete (*promises)[i];
120 delete pending_rel_seqs;
122 delete thrd_last_action;
129 static action_list_t * get_safe_ptr_action(HashTable<const void *, action_list_t *, uintptr_t, 4> * hash, void * ptr) {
130 action_list_t * tmp=hash->get(ptr);
132 tmp=new action_list_t();
138 static std::vector<action_list_t> * get_safe_ptr_vect_action(HashTable<void *, std::vector<action_list_t> *, uintptr_t, 4> * hash, void * ptr) {
139 std::vector<action_list_t> * tmp=hash->get(ptr);
141 tmp=new std::vector<action_list_t>();
148 * Restores user program to initial state and resets all model-checker data
151 void ModelChecker::reset_to_initial_state()
153 DEBUG("+++ Resetting to initial state +++\n");
154 node_stack->reset_execution();
156 /* Print all model-checker output before rollback */
159 snapshotObject->backTrackBeforeStep(0);
162 /** @return a thread ID for a new Thread */
163 thread_id_t ModelChecker::get_next_id()
165 return priv->next_thread_id++;
168 /** @return the number of user threads created during this execution */
169 unsigned int ModelChecker::get_num_threads() const
171 return priv->next_thread_id;
174 /** @return The currently executing Thread. */
175 Thread * ModelChecker::get_current_thread() const
177 return scheduler->get_current_thread();
180 /** @return a sequence number for a new ModelAction */
181 modelclock_t ModelChecker::get_next_seq_num()
183 return ++priv->used_sequence_numbers;
186 Node * ModelChecker::get_curr_node() const
188 return node_stack->get_head();
192 * @brief Choose the next thread to execute.
194 * This function chooses the next thread that should execute. It can force the
195 * adjacency of read/write portions of a RMW action, force THREAD_CREATE to be
196 * followed by a THREAD_START, or it can enforce execution replay/backtracking.
197 * The model-checker may have no preference regarding the next thread (i.e.,
198 * when exploring a new execution ordering), in which case this will return
200 * @param curr The current ModelAction. This action might guide the choice of
202 * @return The next thread to run. If the model-checker has no preference, NULL.
204 Thread * ModelChecker::get_next_thread(ModelAction *curr)
209 /* Do not split atomic actions. */
211 return thread_current();
212 /* The THREAD_CREATE action points to the created Thread */
213 else if (curr->get_type() == THREAD_CREATE)
214 return (Thread *)curr->get_location();
217 /* Have we completed exploring the preselected path? */
221 /* Else, we are trying to replay an execution */
222 ModelAction *next = node_stack->get_next()->get_action();
224 if (next == diverge) {
225 if (earliest_diverge == NULL || *diverge < *earliest_diverge)
226 earliest_diverge=diverge;
228 Node *nextnode = next->get_node();
229 Node *prevnode = nextnode->get_parent();
230 scheduler->update_sleep_set(prevnode);
232 /* Reached divergence point */
233 if (nextnode->increment_misc()) {
234 /* The next node will try to satisfy a different misc_index values. */
235 tid = next->get_tid();
236 node_stack->pop_restofstack(2);
237 } else if (nextnode->increment_promise()) {
238 /* The next node will try to satisfy a different set of promises. */
239 tid = next->get_tid();
240 node_stack->pop_restofstack(2);
241 } else if (nextnode->increment_read_from()) {
242 /* The next node will read from a different value. */
243 tid = next->get_tid();
244 node_stack->pop_restofstack(2);
245 } else if (nextnode->increment_future_value()) {
246 /* The next node will try to read from a different future value. */
247 tid = next->get_tid();
248 node_stack->pop_restofstack(2);
249 } else if (nextnode->increment_relseq_break()) {
250 /* The next node will try to resolve a release sequence differently */
251 tid = next->get_tid();
252 node_stack->pop_restofstack(2);
254 /* Make a different thread execute for next step */
255 scheduler->add_sleep(thread_map->get(id_to_int(next->get_tid())));
256 tid = prevnode->get_next_backtrack();
257 /* Make sure the backtracked thread isn't sleeping. */
258 node_stack->pop_restofstack(1);
259 if (diverge==earliest_diverge) {
260 earliest_diverge=prevnode->get_action();
263 /* The correct sleep set is in the parent node. */
266 DEBUG("*** Divergence point ***\n");
270 tid = next->get_tid();
272 DEBUG("*** ModelChecker chose next thread = %d ***\n", id_to_int(tid));
273 ASSERT(tid != THREAD_ID_T_NONE);
274 return thread_map->get(id_to_int(tid));
278 * We need to know what the next actions of all threads in the sleep
279 * set will be. This method computes them and stores the actions at
280 * the corresponding thread object's pending action.
283 void ModelChecker::execute_sleep_set() {
284 for(unsigned int i=0;i<get_num_threads();i++) {
285 thread_id_t tid=int_to_id(i);
286 Thread *thr=get_thread(tid);
287 if ( scheduler->get_enabled(thr) == THREAD_SLEEP_SET &&
288 thr->get_pending() == NULL ) {
289 thr->set_state(THREAD_RUNNING);
290 scheduler->next_thread(thr);
291 Thread::swap(&system_context, thr);
292 priv->current_action->set_sleep_flag();
293 thr->set_pending(priv->current_action);
296 priv->current_action = NULL;
299 void ModelChecker::wake_up_sleeping_actions(ModelAction * curr) {
300 for(unsigned int i=0;i<get_num_threads();i++) {
301 thread_id_t tid=int_to_id(i);
302 Thread *thr=get_thread(tid);
303 if ( scheduler->get_enabled(thr) == THREAD_SLEEP_SET ) {
304 ModelAction *pending_act=thr->get_pending();
305 if ((!curr->is_rmwr())&&pending_act->could_synchronize_with(curr)) {
306 //Remove this thread from sleep set
307 scheduler->remove_sleep(thr);
313 /** @brief Alert the model-checker that an incorrectly-ordered
314 * synchronization was made */
315 void ModelChecker::set_bad_synchronization()
317 priv->bad_synchronization = true;
320 bool ModelChecker::has_asserted() const
322 return priv->asserted;
325 void ModelChecker::set_assert()
327 priv->asserted = true;
331 * Check if we are in a deadlock. Should only be called at the end of an
332 * execution, although it should not give false positives in the middle of an
333 * execution (there should be some ENABLED thread).
335 * @return True if program is in a deadlock; false otherwise
337 bool ModelChecker::is_deadlocked() const
339 bool blocking_threads = false;
340 for (unsigned int i = 0; i < get_num_threads(); i++) {
341 thread_id_t tid = int_to_id(i);
344 Thread *t = get_thread(tid);
345 if (!t->is_model_thread() && t->get_pending())
346 blocking_threads = true;
348 return blocking_threads;
352 * Check if this is a complete execution. That is, have all thread completed
353 * execution (rather than exiting because sleep sets have forced a redundant
356 * @return True if the execution is complete.
358 bool ModelChecker::is_complete_execution() const
360 for (unsigned int i = 0; i < get_num_threads(); i++)
361 if (is_enabled(int_to_id(i)))
367 * @brief Assert a bug in the executing program.
369 * Use this function to assert any sort of bug in the user program. If the
370 * current trace is feasible (actually, a prefix of some feasible execution),
371 * then this execution will be aborted, printing the appropriate message. If
372 * the current trace is not yet feasible, the error message will be stashed and
373 * printed if the execution ever becomes feasible.
375 * @param msg Descriptive message for the bug (do not include newline char)
376 * @return True if bug is immediately-feasible
378 bool ModelChecker::assert_bug(const char *msg)
380 priv->bugs.push_back(new bug_message(msg));
382 if (isfeasibleprefix()) {
390 * @brief Assert a bug in the executing program, asserted by a user thread
391 * @see ModelChecker::assert_bug
392 * @param msg Descriptive message for the bug (do not include newline char)
394 void ModelChecker::assert_user_bug(const char *msg)
396 /* If feasible bug, bail out now */
398 switch_to_master(NULL);
401 /** @return True, if any bugs have been reported for this execution */
402 bool ModelChecker::have_bug_reports() const
404 return priv->bugs.size() != 0;
407 /** @brief Print bug report listing for this execution (if any bugs exist) */
408 void ModelChecker::print_bugs() const
410 if (have_bug_reports()) {
411 model_print("Bug report: %zu bug%s detected\n",
413 priv->bugs.size() > 1 ? "s" : "");
414 for (unsigned int i = 0; i < priv->bugs.size(); i++)
415 priv->bugs[i]->print();
420 * @brief Record end-of-execution stats
422 * Must be run when exiting an execution. Records various stats.
423 * @see struct execution_stats
425 void ModelChecker::record_stats()
428 if (!isfeasibleprefix())
429 stats.num_infeasible++;
430 else if (have_bug_reports())
431 stats.num_buggy_executions++;
432 else if (is_complete_execution())
433 stats.num_complete++;
435 stats.num_redundant++;
438 /** @brief Print execution stats */
439 void ModelChecker::print_stats() const
441 model_print("Number of complete, bug-free executions: %d\n", stats.num_complete);
442 model_print("Number of redundant executions: %d\n", stats.num_redundant);
443 model_print("Number of buggy executions: %d\n", stats.num_buggy_executions);
444 model_print("Number of infeasible executions: %d\n", stats.num_infeasible);
445 model_print("Total executions: %d\n", stats.num_total);
446 model_print("Total nodes created: %d\n", node_stack->get_total_nodes());
450 * @brief End-of-exeuction print
451 * @param printbugs Should any existing bugs be printed?
453 void ModelChecker::print_execution(bool printbugs) const
455 print_program_output();
457 if (DBG_ENABLED() || params.verbose) {
458 model_print("Earliest divergence point since last feasible execution:\n");
459 if (earliest_diverge)
460 earliest_diverge->print();
462 model_print("(Not set)\n");
468 /* Don't print invalid bugs */
477 * Queries the model-checker for more executions to explore and, if one
478 * exists, resets the model-checker state to execute a new execution.
480 * @return If there are more executions to explore, return true. Otherwise,
483 bool ModelChecker::next_execution()
486 /* Is this execution a feasible execution that's worth bug-checking? */
487 bool complete = isfeasibleprefix() && (is_complete_execution() ||
490 /* End-of-execution bug checks */
493 assert_bug("Deadlock detected");
501 if (DBG_ENABLED() || params.verbose || have_bug_reports())
502 print_execution(complete);
504 clear_program_output();
507 earliest_diverge = NULL;
509 if ((diverge = get_next_backtrack()) == NULL)
513 model_print("Next execution will diverge at:\n");
517 reset_to_initial_state();
521 ModelAction * ModelChecker::get_last_conflict(ModelAction *act)
523 switch (act->get_type()) {
528 /* Optimization: relaxed operations don't need backtracking */
529 if (act->is_relaxed())
531 /* linear search: from most recent to oldest */
532 action_list_t *list = get_safe_ptr_action(obj_map, act->get_location());
533 action_list_t::reverse_iterator rit;
534 for (rit = list->rbegin(); rit != list->rend(); rit++) {
535 ModelAction *prev = *rit;
536 if (prev->could_synchronize_with(act))
542 case ATOMIC_TRYLOCK: {
543 /* linear search: from most recent to oldest */
544 action_list_t *list = get_safe_ptr_action(obj_map, act->get_location());
545 action_list_t::reverse_iterator rit;
546 for (rit = list->rbegin(); rit != list->rend(); rit++) {
547 ModelAction *prev = *rit;
548 if (act->is_conflicting_lock(prev))
553 case ATOMIC_UNLOCK: {
554 /* linear search: from most recent to oldest */
555 action_list_t *list = get_safe_ptr_action(obj_map, act->get_location());
556 action_list_t::reverse_iterator rit;
557 for (rit = list->rbegin(); rit != list->rend(); rit++) {
558 ModelAction *prev = *rit;
559 if (!act->same_thread(prev)&&prev->is_failed_trylock())
565 /* linear search: from most recent to oldest */
566 action_list_t *list = get_safe_ptr_action(obj_map, act->get_location());
567 action_list_t::reverse_iterator rit;
568 for (rit = list->rbegin(); rit != list->rend(); rit++) {
569 ModelAction *prev = *rit;
570 if (!act->same_thread(prev)&&prev->is_failed_trylock())
572 if (!act->same_thread(prev)&&prev->is_notify())
578 case ATOMIC_NOTIFY_ALL:
579 case ATOMIC_NOTIFY_ONE: {
580 /* linear search: from most recent to oldest */
581 action_list_t *list = get_safe_ptr_action(obj_map, act->get_location());
582 action_list_t::reverse_iterator rit;
583 for (rit = list->rbegin(); rit != list->rend(); rit++) {
584 ModelAction *prev = *rit;
585 if (!act->same_thread(prev)&&prev->is_wait())
596 /** This method finds backtracking points where we should try to
597 * reorder the parameter ModelAction against.
599 * @param the ModelAction to find backtracking points for.
601 void ModelChecker::set_backtracking(ModelAction *act)
603 Thread *t = get_thread(act);
604 ModelAction * prev = get_last_conflict(act);
608 Node * node = prev->get_node()->get_parent();
610 int low_tid, high_tid;
611 if (node->is_enabled(t)) {
612 low_tid = id_to_int(act->get_tid());
613 high_tid = low_tid+1;
616 high_tid = get_num_threads();
619 for(int i = low_tid; i < high_tid; i++) {
620 thread_id_t tid = int_to_id(i);
622 /* Make sure this thread can be enabled here. */
623 if (i >= node->get_num_threads())
626 /* Don't backtrack into a point where the thread is disabled or sleeping. */
627 if (node->enabled_status(tid)!=THREAD_ENABLED)
630 /* Check if this has been explored already */
631 if (node->has_been_explored(tid))
634 /* See if fairness allows */
635 if (model->params.fairwindow != 0 && !node->has_priority(tid)) {
637 for(int t=0;t<node->get_num_threads();t++) {
638 thread_id_t tother=int_to_id(t);
639 if (node->is_enabled(tother) && node->has_priority(tother)) {
647 /* Cache the latest backtracking point */
648 if (!priv->next_backtrack || *prev > *priv->next_backtrack)
649 priv->next_backtrack = prev;
651 /* If this is a new backtracking point, mark the tree */
652 if (!node->set_backtrack(tid))
654 DEBUG("Setting backtrack: conflict = %d, instead tid = %d\n",
655 id_to_int(prev->get_tid()),
656 id_to_int(t->get_id()));
665 * Returns last backtracking point. The model checker will explore a different
666 * path for this point in the next execution.
667 * @return The ModelAction at which the next execution should diverge.
669 ModelAction * ModelChecker::get_next_backtrack()
671 ModelAction *next = priv->next_backtrack;
672 priv->next_backtrack = NULL;
677 * Processes a read or rmw model action.
678 * @param curr is the read model action to process.
679 * @param second_part_of_rmw is boolean that is true is this is the second action of a rmw.
680 * @return True if processing this read updates the mo_graph.
682 bool ModelChecker::process_read(ModelAction *curr, bool second_part_of_rmw)
684 uint64_t value = VALUE_NONE;
685 bool updated = false;
687 const ModelAction *reads_from = curr->get_node()->get_read_from();
688 if (reads_from != NULL) {
689 mo_graph->startChanges();
691 value = reads_from->get_value();
692 bool r_status = false;
694 if (!second_part_of_rmw) {
695 check_recency(curr, reads_from);
696 r_status = r_modification_order(curr, reads_from);
700 if (!second_part_of_rmw&&is_infeasible()&&(curr->get_node()->increment_read_from()||curr->get_node()->increment_future_value())) {
701 mo_graph->rollbackChanges();
702 priv->too_many_reads = false;
706 curr->read_from(reads_from);
707 mo_graph->commitChanges();
708 mo_check_promises(curr->get_tid(), reads_from);
711 } else if (!second_part_of_rmw) {
712 /* Read from future value */
713 value = curr->get_node()->get_future_value();
714 modelclock_t expiration = curr->get_node()->get_future_value_expiration();
715 curr->read_from(NULL);
716 Promise *valuepromise = new Promise(curr, value, expiration);
717 promises->push_back(valuepromise);
719 get_thread(curr)->set_return_value(value);
725 * Processes a lock, trylock, or unlock model action. @param curr is
726 * the read model action to process.
728 * The try lock operation checks whether the lock is taken. If not,
729 * it falls to the normal lock operation case. If so, it returns
732 * The lock operation has already been checked that it is enabled, so
733 * it just grabs the lock and synchronizes with the previous unlock.
735 * The unlock operation has to re-enable all of the threads that are
736 * waiting on the lock.
738 * @return True if synchronization was updated; false otherwise
740 bool ModelChecker::process_mutex(ModelAction *curr) {
741 std::mutex *mutex=NULL;
742 struct std::mutex_state *state=NULL;
744 if (curr->is_trylock() || curr->is_lock() || curr->is_unlock()) {
745 mutex = (std::mutex *)curr->get_location();
746 state = mutex->get_state();
747 } else if(curr->is_wait()) {
748 mutex = (std::mutex *)curr->get_value();
749 state = mutex->get_state();
752 switch (curr->get_type()) {
753 case ATOMIC_TRYLOCK: {
754 bool success = !state->islocked;
755 curr->set_try_lock(success);
757 get_thread(curr)->set_return_value(0);
760 get_thread(curr)->set_return_value(1);
762 //otherwise fall into the lock case
764 if (curr->get_cv()->getClock(state->alloc_tid) <= state->alloc_clock)
765 assert_bug("Lock access before initialization");
766 state->islocked = true;
767 ModelAction *unlock = get_last_unlock(curr);
768 //synchronize with the previous unlock statement
769 if (unlock != NULL) {
770 curr->synchronize_with(unlock);
775 case ATOMIC_UNLOCK: {
777 state->islocked = false;
778 //wake up the other threads
779 action_list_t *waiters = get_safe_ptr_action(lock_waiters_map, curr->get_location());
780 //activate all the waiting threads
781 for (action_list_t::iterator rit = waiters->begin(); rit != waiters->end(); rit++) {
782 scheduler->wake(get_thread(*rit));
789 state->islocked = false;
790 //wake up the other threads
791 action_list_t *waiters = get_safe_ptr_action(lock_waiters_map, (void *) curr->get_value());
792 //activate all the waiting threads
793 for (action_list_t::iterator rit = waiters->begin(); rit != waiters->end(); rit++) {
794 scheduler->wake(get_thread(*rit));
797 //check whether we should go to sleep or not...simulate spurious failures
798 if (curr->get_node()->get_misc()==0) {
799 get_safe_ptr_action(condvar_waiters_map, curr->get_location())->push_back(curr);
801 scheduler->sleep(get_current_thread());
805 case ATOMIC_NOTIFY_ALL: {
806 action_list_t *waiters = get_safe_ptr_action(condvar_waiters_map, curr->get_location());
807 //activate all the waiting threads
808 for (action_list_t::iterator rit = waiters->begin(); rit != waiters->end(); rit++) {
809 scheduler->wake(get_thread(*rit));
814 case ATOMIC_NOTIFY_ONE: {
815 action_list_t *waiters = get_safe_ptr_action(condvar_waiters_map, curr->get_location());
816 int wakeupthread=curr->get_node()->get_misc();
817 action_list_t::iterator it = waiters->begin();
818 advance(it, wakeupthread);
819 scheduler->wake(get_thread(*it));
831 * Process a write ModelAction
832 * @param curr The ModelAction to process
833 * @return True if the mo_graph was updated or promises were resolved
835 bool ModelChecker::process_write(ModelAction *curr)
837 bool updated_mod_order = w_modification_order(curr);
838 bool updated_promises = resolve_promises(curr);
840 if (promises->size() == 0) {
841 for (unsigned int i = 0; i < futurevalues->size(); i++) {
842 struct PendingFutureValue pfv = (*futurevalues)[i];
843 //Do more ambitious checks now that mo is more complete
844 if (mo_may_allow(pfv.writer, pfv.act)&&
845 pfv.act->get_node()->add_future_value(pfv.writer->get_value(), pfv.writer->get_seq_number()+params.maxfuturedelay) &&
846 (!priv->next_backtrack || *pfv.act > *priv->next_backtrack))
847 priv->next_backtrack = pfv.act;
849 futurevalues->resize(0);
852 mo_graph->commitChanges();
853 mo_check_promises(curr->get_tid(), curr);
855 get_thread(curr)->set_return_value(VALUE_NONE);
856 return updated_mod_order || updated_promises;
860 * @brief Process the current action for thread-related activity
862 * Performs current-action processing for a THREAD_* ModelAction. Proccesses
863 * may include setting Thread status, completing THREAD_FINISH/THREAD_JOIN
864 * synchronization, etc. This function is a no-op for non-THREAD actions
865 * (e.g., ATOMIC_{READ,WRITE,RMW,LOCK}, etc.)
867 * @param curr The current action
868 * @return True if synchronization was updated or a thread completed
870 bool ModelChecker::process_thread_action(ModelAction *curr)
872 bool updated = false;
874 switch (curr->get_type()) {
875 case THREAD_CREATE: {
876 Thread *th = (Thread *)curr->get_location();
877 th->set_creation(curr);
881 Thread *blocking = (Thread *)curr->get_location();
882 ModelAction *act = get_last_action(blocking->get_id());
883 curr->synchronize_with(act);
884 updated = true; /* trigger rel-seq checks */
887 case THREAD_FINISH: {
888 Thread *th = get_thread(curr);
889 while (!th->wait_list_empty()) {
890 ModelAction *act = th->pop_wait_list();
891 scheduler->wake(get_thread(act));
894 updated = true; /* trigger rel-seq checks */
898 check_promises(curr->get_tid(), NULL, curr->get_cv());
909 * @brief Process the current action for release sequence fixup activity
911 * Performs model-checker release sequence fixups for the current action,
912 * forcing a single pending release sequence to break (with a given, potential
913 * "loose" write) or to complete (i.e., synchronize). If a pending release
914 * sequence forms a complete release sequence, then we must perform the fixup
915 * synchronization, mo_graph additions, etc.
917 * @param curr The current action; must be a release sequence fixup action
918 * @param work_queue The work queue to which to add work items as they are
921 void ModelChecker::process_relseq_fixup(ModelAction *curr, work_queue_t *work_queue)
923 const ModelAction *write = curr->get_node()->get_relseq_break();
924 struct release_seq *sequence = pending_rel_seqs->back();
925 pending_rel_seqs->pop_back();
927 ModelAction *acquire = sequence->acquire;
928 const ModelAction *rf = sequence->rf;
929 const ModelAction *release = sequence->release;
933 ASSERT(release->same_thread(rf));
937 * @todo Forcing a synchronization requires that we set
938 * modification order constraints. For instance, we can't allow
939 * a fixup sequence in which two separate read-acquire
940 * operations read from the same sequence, where the first one
941 * synchronizes and the other doesn't. Essentially, we can't
942 * allow any writes to insert themselves between 'release' and
946 /* Must synchronize */
947 if (!acquire->synchronize_with(release)) {
948 set_bad_synchronization();
951 /* Re-check all pending release sequences */
952 work_queue->push_back(CheckRelSeqWorkEntry(NULL));
953 /* Re-check act for mo_graph edges */
954 work_queue->push_back(MOEdgeWorkEntry(acquire));
956 /* propagate synchronization to later actions */
957 action_list_t::reverse_iterator rit = action_trace->rbegin();
958 for (; (*rit) != acquire; rit++) {
959 ModelAction *propagate = *rit;
960 if (acquire->happens_before(propagate)) {
961 propagate->synchronize_with(acquire);
962 /* Re-check 'propagate' for mo_graph edges */
963 work_queue->push_back(MOEdgeWorkEntry(propagate));
967 /* Break release sequence with new edges:
968 * release --mo--> write --mo--> rf */
969 mo_graph->addEdge(release, write);
970 mo_graph->addEdge(write, rf);
973 /* See if we have realized a data race */
978 * Initialize the current action by performing one or more of the following
979 * actions, as appropriate: merging RMWR and RMWC/RMW actions, stepping forward
980 * in the NodeStack, manipulating backtracking sets, allocating and
981 * initializing clock vectors, and computing the promises to fulfill.
983 * @param curr The current action, as passed from the user context; may be
984 * freed/invalidated after the execution of this function, with a different
985 * action "returned" its place (pass-by-reference)
986 * @return True if curr is a newly-explored action; false otherwise
988 bool ModelChecker::initialize_curr_action(ModelAction **curr)
990 ModelAction *newcurr;
992 if ((*curr)->is_rmwc() || (*curr)->is_rmw()) {
993 newcurr = process_rmw(*curr);
996 if (newcurr->is_rmw())
997 compute_promises(newcurr);
1003 (*curr)->set_seq_number(get_next_seq_num());
1005 newcurr = node_stack->explore_action(*curr, scheduler->get_enabled_array());
1007 /* First restore type and order in case of RMW operation */
1008 if ((*curr)->is_rmwr())
1009 newcurr->copy_typeandorder(*curr);
1011 ASSERT((*curr)->get_location() == newcurr->get_location());
1012 newcurr->copy_from_new(*curr);
1014 /* Discard duplicate ModelAction; use action from NodeStack */
1017 /* Always compute new clock vector */
1018 newcurr->create_cv(get_parent_action(newcurr->get_tid()));
1021 return false; /* Action was explored previously */
1025 /* Always compute new clock vector */
1026 newcurr->create_cv(get_parent_action(newcurr->get_tid()));
1028 * Perform one-time actions when pushing new ModelAction onto
1031 if (newcurr->is_write())
1032 compute_promises(newcurr);
1033 else if (newcurr->is_relseq_fixup())
1034 compute_relseq_breakwrites(newcurr);
1035 else if (newcurr->is_wait())
1036 newcurr->get_node()->set_misc_max(2);
1037 else if (newcurr->is_notify_one()) {
1038 newcurr->get_node()->set_misc_max(get_safe_ptr_action(condvar_waiters_map, newcurr->get_location())->size());
1040 return true; /* This was a new ModelAction */
1045 * @brief Check whether a model action is enabled.
1047 * Checks whether a lock or join operation would be successful (i.e., is the
1048 * lock already locked, or is the joined thread already complete). If not, put
1049 * the action in a waiter list.
1051 * @param curr is the ModelAction to check whether it is enabled.
1052 * @return a bool that indicates whether the action is enabled.
1054 bool ModelChecker::check_action_enabled(ModelAction *curr) {
1055 if (curr->is_lock()) {
1056 std::mutex * lock = (std::mutex *)curr->get_location();
1057 struct std::mutex_state * state = lock->get_state();
1058 if (state->islocked) {
1059 //Stick the action in the appropriate waiting queue
1060 get_safe_ptr_action(lock_waiters_map, curr->get_location())->push_back(curr);
1063 } else if (curr->get_type() == THREAD_JOIN) {
1064 Thread *blocking = (Thread *)curr->get_location();
1065 if (!blocking->is_complete()) {
1066 blocking->push_wait_list(curr);
1075 * Stores the ModelAction for the current thread action. Call this
1076 * immediately before switching from user- to system-context to pass
1077 * data between them.
1078 * @param act The ModelAction created by the user-thread action
1080 void ModelChecker::set_current_action(ModelAction *act) {
1081 priv->current_action = act;
1085 * This is the heart of the model checker routine. It performs model-checking
1086 * actions corresponding to a given "current action." Among other processes, it
1087 * calculates reads-from relationships, updates synchronization clock vectors,
1088 * forms a memory_order constraints graph, and handles replay/backtrack
1089 * execution when running permutations of previously-observed executions.
1091 * @param curr The current action to process
1092 * @return The next Thread that must be executed. May be NULL if ModelChecker
1093 * makes no choice (e.g., according to replay execution, combining RMW actions,
1096 Thread * ModelChecker::check_current_action(ModelAction *curr)
1099 bool second_part_of_rmw = curr->is_rmwc() || curr->is_rmw();
1101 if (!check_action_enabled(curr)) {
1102 /* Make the execution look like we chose to run this action
1103 * much later, when a lock/join can succeed */
1104 get_current_thread()->set_pending(curr);
1105 scheduler->sleep(get_current_thread());
1106 return get_next_thread(NULL);
1109 bool newly_explored = initialize_curr_action(&curr);
1111 wake_up_sleeping_actions(curr);
1113 /* Add the action to lists before any other model-checking tasks */
1114 if (!second_part_of_rmw)
1115 add_action_to_lists(curr);
1117 /* Build may_read_from set for newly-created actions */
1118 if (newly_explored && curr->is_read())
1119 build_reads_from_past(curr);
1121 /* Initialize work_queue with the "current action" work */
1122 work_queue_t work_queue(1, CheckCurrWorkEntry(curr));
1123 while (!work_queue.empty() && !has_asserted()) {
1124 WorkQueueEntry work = work_queue.front();
1125 work_queue.pop_front();
1127 switch (work.type) {
1128 case WORK_CHECK_CURR_ACTION: {
1129 ModelAction *act = work.action;
1130 bool update = false; /* update this location's release seq's */
1131 bool update_all = false; /* update all release seq's */
1133 if (process_thread_action(curr))
1136 if (act->is_read() && process_read(act, second_part_of_rmw))
1139 if (act->is_write() && process_write(act))
1142 if (act->is_mutex_op() && process_mutex(act))
1145 if (act->is_relseq_fixup())
1146 process_relseq_fixup(curr, &work_queue);
1149 work_queue.push_back(CheckRelSeqWorkEntry(NULL));
1151 work_queue.push_back(CheckRelSeqWorkEntry(act->get_location()));
1154 case WORK_CHECK_RELEASE_SEQ:
1155 resolve_release_sequences(work.location, &work_queue);
1157 case WORK_CHECK_MO_EDGES: {
1158 /** @todo Complete verification of work_queue */
1159 ModelAction *act = work.action;
1160 bool updated = false;
1162 if (act->is_read()) {
1163 const ModelAction *rf = act->get_reads_from();
1164 if (rf != NULL && r_modification_order(act, rf))
1167 if (act->is_write()) {
1168 if (w_modification_order(act))
1171 mo_graph->commitChanges();
1174 work_queue.push_back(CheckRelSeqWorkEntry(act->get_location()));
1183 check_curr_backtracking(curr);
1184 set_backtracking(curr);
1185 return get_next_thread(curr);
1188 void ModelChecker::check_curr_backtracking(ModelAction * curr) {
1189 Node *currnode = curr->get_node();
1190 Node *parnode = currnode->get_parent();
1192 if ((!parnode->backtrack_empty() ||
1193 !currnode->misc_empty() ||
1194 !currnode->read_from_empty() ||
1195 !currnode->future_value_empty() ||
1196 !currnode->promise_empty() ||
1197 !currnode->relseq_break_empty())
1198 && (!priv->next_backtrack ||
1199 *curr > *priv->next_backtrack)) {
1200 priv->next_backtrack = curr;
1204 bool ModelChecker::promises_expired() const
1206 for (unsigned int promise_index = 0; promise_index < promises->size(); promise_index++) {
1207 Promise *promise = (*promises)[promise_index];
1208 if (promise->get_expiration()<priv->used_sequence_numbers) {
1216 * This is the strongest feasibility check available.
1217 * @return whether the current trace (partial or complete) must be a prefix of
1220 bool ModelChecker::isfeasibleprefix() const
1222 return pending_rel_seqs->size() == 0 && is_feasible_prefix_ignore_relseq();
1226 * Returns whether the current completed trace is feasible, except for pending
1227 * release sequences.
1229 bool ModelChecker::is_feasible_prefix_ignore_relseq() const
1231 if (DBG_ENABLED() && promises->size() != 0)
1232 DEBUG("Infeasible: unrevolved promises\n");
1234 return !is_infeasible() && promises->size() == 0;
1238 * Check if the current partial trace is infeasible. Does not check any
1239 * end-of-execution flags, which might rule out the execution. Thus, this is
1240 * useful only for ruling an execution as infeasible.
1241 * @return whether the current partial trace is infeasible.
1243 bool ModelChecker::is_infeasible() const
1245 if (DBG_ENABLED() && mo_graph->checkForRMWViolation())
1246 DEBUG("Infeasible: RMW violation\n");
1248 return mo_graph->checkForRMWViolation() || is_infeasible_ignoreRMW();
1252 * Check If the current partial trace is infeasible, while ignoring
1253 * infeasibility related to 2 RMW's reading from the same store. It does not
1254 * check end-of-execution feasibility.
1255 * @see ModelChecker::is_infeasible
1256 * @return whether the current partial trace is infeasible, ignoring multiple
1257 * RMWs reading from the same store.
1259 bool ModelChecker::is_infeasible_ignoreRMW() const
1261 if (DBG_ENABLED()) {
1262 if (mo_graph->checkForCycles())
1263 DEBUG("Infeasible: modification order cycles\n");
1264 if (priv->failed_promise)
1265 DEBUG("Infeasible: failed promise\n");
1266 if (priv->too_many_reads)
1267 DEBUG("Infeasible: too many reads\n");
1268 if (priv->bad_synchronization)
1269 DEBUG("Infeasible: bad synchronization ordering\n");
1270 if (promises_expired())
1271 DEBUG("Infeasible: promises expired\n");
1273 return mo_graph->checkForCycles() || priv->failed_promise ||
1274 priv->too_many_reads || priv->bad_synchronization ||
1278 /** Close out a RMWR by converting previous RMWR into a RMW or READ. */
1279 ModelAction * ModelChecker::process_rmw(ModelAction *act) {
1280 ModelAction *lastread = get_last_action(act->get_tid());
1281 lastread->process_rmw(act);
1282 if (act->is_rmw() && lastread->get_reads_from()!=NULL) {
1283 mo_graph->addRMWEdge(lastread->get_reads_from(), lastread);
1284 mo_graph->commitChanges();
1290 * Checks whether a thread has read from the same write for too many times
1291 * without seeing the effects of a later write.
1294 * 1) there must a different write that we could read from that would satisfy the modification order,
1295 * 2) we must have read from the same value in excess of maxreads times, and
1296 * 3) that other write must have been in the reads_from set for maxreads times.
1298 * If so, we decide that the execution is no longer feasible.
1300 void ModelChecker::check_recency(ModelAction *curr, const ModelAction *rf) {
1301 if (params.maxreads != 0) {
1303 if (curr->get_node()->get_read_from_size() <= 1)
1305 //Must make sure that execution is currently feasible... We could
1306 //accidentally clear by rolling back
1307 if (is_infeasible())
1309 std::vector<action_list_t> *thrd_lists = get_safe_ptr_vect_action(obj_thrd_map, curr->get_location());
1310 int tid = id_to_int(curr->get_tid());
1313 if ((int)thrd_lists->size() <= tid)
1315 action_list_t *list = &(*thrd_lists)[tid];
1317 action_list_t::reverse_iterator rit = list->rbegin();
1318 /* Skip past curr */
1319 for (; (*rit) != curr; rit++)
1321 /* go past curr now */
1324 action_list_t::reverse_iterator ritcopy = rit;
1325 //See if we have enough reads from the same value
1327 for (; count < params.maxreads; rit++,count++) {
1328 if (rit==list->rend())
1330 ModelAction *act = *rit;
1331 if (!act->is_read())
1334 if (act->get_reads_from() != rf)
1336 if (act->get_node()->get_read_from_size() <= 1)
1339 for (int i = 0; i<curr->get_node()->get_read_from_size(); i++) {
1341 const ModelAction * write = curr->get_node()->get_read_from_at(i);
1343 //Need a different write
1347 /* Test to see whether this is a feasible write to read from*/
1348 mo_graph->startChanges();
1349 r_modification_order(curr, write);
1350 bool feasiblereadfrom = !is_infeasible();
1351 mo_graph->rollbackChanges();
1353 if (!feasiblereadfrom)
1357 bool feasiblewrite = true;
1358 //new we need to see if this write works for everyone
1360 for (int loop = count; loop>0; loop--,rit++) {
1361 ModelAction *act=*rit;
1362 bool foundvalue = false;
1363 for (int j = 0; j<act->get_node()->get_read_from_size(); j++) {
1364 if (act->get_node()->get_read_from_at(j)==write) {
1370 feasiblewrite = false;
1374 if (feasiblewrite) {
1375 priv->too_many_reads = true;
1383 * Updates the mo_graph with the constraints imposed from the current
1386 * Basic idea is the following: Go through each other thread and find
1387 * the lastest action that happened before our read. Two cases:
1389 * (1) The action is a write => that write must either occur before
1390 * the write we read from or be the write we read from.
1392 * (2) The action is a read => the write that that action read from
1393 * must occur before the write we read from or be the same write.
1395 * @param curr The current action. Must be a read.
1396 * @param rf The action that curr reads from. Must be a write.
1397 * @return True if modification order edges were added; false otherwise
1399 bool ModelChecker::r_modification_order(ModelAction *curr, const ModelAction *rf)
1401 std::vector<action_list_t> *thrd_lists = get_safe_ptr_vect_action(obj_thrd_map, curr->get_location());
1404 ASSERT(curr->is_read());
1406 /* Iterate over all threads */
1407 for (i = 0; i < thrd_lists->size(); i++) {
1408 /* Iterate over actions in thread, starting from most recent */
1409 action_list_t *list = &(*thrd_lists)[i];
1410 action_list_t::reverse_iterator rit;
1411 for (rit = list->rbegin(); rit != list->rend(); rit++) {
1412 ModelAction *act = *rit;
1415 * Include at most one act per-thread that "happens
1416 * before" curr. Don't consider reflexively.
1418 if (act->happens_before(curr) && act != curr) {
1419 if (act->is_write()) {
1421 mo_graph->addEdge(act, rf);
1425 const ModelAction *prevreadfrom = act->get_reads_from();
1426 //if the previous read is unresolved, keep going...
1427 if (prevreadfrom == NULL)
1430 if (rf != prevreadfrom) {
1431 mo_graph->addEdge(prevreadfrom, rf);
1443 /** This method fixes up the modification order when we resolve a
1444 * promises. The basic problem is that actions that occur after the
1445 * read curr could not property add items to the modification order
1448 * So for each thread, we find the earliest item that happens after
1449 * the read curr. This is the item we have to fix up with additional
1450 * constraints. If that action is write, we add a MO edge between
1451 * the Action rf and that action. If the action is a read, we add a
1452 * MO edge between the Action rf, and whatever the read accessed.
1454 * @param curr is the read ModelAction that we are fixing up MO edges for.
1455 * @param rf is the write ModelAction that curr reads from.
1458 void ModelChecker::post_r_modification_order(ModelAction *curr, const ModelAction *rf)
1460 std::vector<action_list_t> *thrd_lists = get_safe_ptr_vect_action(obj_thrd_map, curr->get_location());
1462 ASSERT(curr->is_read());
1464 /* Iterate over all threads */
1465 for (i = 0; i < thrd_lists->size(); i++) {
1466 /* Iterate over actions in thread, starting from most recent */
1467 action_list_t *list = &(*thrd_lists)[i];
1468 action_list_t::reverse_iterator rit;
1469 ModelAction *lastact = NULL;
1471 /* Find last action that happens after curr that is either not curr or a rmw */
1472 for (rit = list->rbegin(); rit != list->rend(); rit++) {
1473 ModelAction *act = *rit;
1474 if (curr->happens_before(act) && (curr != act || curr->is_rmw())) {
1480 /* Include at most one act per-thread that "happens before" curr */
1481 if (lastact != NULL) {
1482 if (lastact==curr) {
1483 //Case 1: The resolved read is a RMW, and we need to make sure
1484 //that the write portion of the RMW mod order after rf
1486 mo_graph->addEdge(rf, lastact);
1487 } else if (lastact->is_read()) {
1488 //Case 2: The resolved read is a normal read and the next
1489 //operation is a read, and we need to make sure the value read
1490 //is mod ordered after rf
1492 const ModelAction *postreadfrom = lastact->get_reads_from();
1493 if (postreadfrom != NULL&&rf != postreadfrom)
1494 mo_graph->addEdge(rf, postreadfrom);
1496 //Case 3: The resolved read is a normal read and the next
1497 //operation is a write, and we need to make sure that the
1498 //write is mod ordered after rf
1500 mo_graph->addEdge(rf, lastact);
1508 * Updates the mo_graph with the constraints imposed from the current write.
1510 * Basic idea is the following: Go through each other thread and find
1511 * the lastest action that happened before our write. Two cases:
1513 * (1) The action is a write => that write must occur before
1516 * (2) The action is a read => the write that that action read from
1517 * must occur before the current write.
1519 * This method also handles two other issues:
1521 * (I) Sequential Consistency: Making sure that if the current write is
1522 * seq_cst, that it occurs after the previous seq_cst write.
1524 * (II) Sending the write back to non-synchronizing reads.
1526 * @param curr The current action. Must be a write.
1527 * @return True if modification order edges were added; false otherwise
1529 bool ModelChecker::w_modification_order(ModelAction *curr)
1531 std::vector<action_list_t> *thrd_lists = get_safe_ptr_vect_action(obj_thrd_map, curr->get_location());
1534 ASSERT(curr->is_write());
1536 if (curr->is_seqcst()) {
1537 /* We have to at least see the last sequentially consistent write,
1538 so we are initialized. */
1539 ModelAction *last_seq_cst = get_last_seq_cst_write(curr);
1540 if (last_seq_cst != NULL) {
1541 mo_graph->addEdge(last_seq_cst, curr);
1546 /* Iterate over all threads */
1547 for (i = 0; i < thrd_lists->size(); i++) {
1548 /* Iterate over actions in thread, starting from most recent */
1549 action_list_t *list = &(*thrd_lists)[i];
1550 action_list_t::reverse_iterator rit;
1551 for (rit = list->rbegin(); rit != list->rend(); rit++) {
1552 ModelAction *act = *rit;
1555 * 1) If RMW and it actually read from something, then we
1556 * already have all relevant edges, so just skip to next
1559 * 2) If RMW and it didn't read from anything, we should
1560 * whatever edge we can get to speed up convergence.
1562 * 3) If normal write, we need to look at earlier actions, so
1563 * continue processing list.
1565 if (curr->is_rmw()) {
1566 if (curr->get_reads_from()!=NULL)
1575 * Include at most one act per-thread that "happens
1578 if (act->happens_before(curr)) {
1580 * Note: if act is RMW, just add edge:
1582 * The following edge should be handled elsewhere:
1583 * readfrom(act) --mo--> act
1585 if (act->is_write())
1586 mo_graph->addEdge(act, curr);
1587 else if (act->is_read()) {
1588 //if previous read accessed a null, just keep going
1589 if (act->get_reads_from() == NULL)
1591 mo_graph->addEdge(act->get_reads_from(), curr);
1595 } else if (act->is_read() && !act->could_synchronize_with(curr) &&
1596 !act->same_thread(curr)) {
1597 /* We have an action that:
1598 (1) did not happen before us
1599 (2) is a read and we are a write
1600 (3) cannot synchronize with us
1601 (4) is in a different thread
1603 that read could potentially read from our write. Note that
1604 these checks are overly conservative at this point, we'll
1605 do more checks before actually removing the
1609 if (thin_air_constraint_may_allow(curr, act)) {
1610 if (!is_infeasible() ||
1611 (curr->is_rmw() && act->is_rmw() && curr->get_reads_from() == act->get_reads_from() && !is_infeasible_ignoreRMW())) {
1612 struct PendingFutureValue pfv = {curr,act};
1613 futurevalues->push_back(pfv);
1623 /** Arbitrary reads from the future are not allowed. Section 29.3
1624 * part 9 places some constraints. This method checks one result of constraint
1625 * constraint. Others require compiler support. */
1626 bool ModelChecker::thin_air_constraint_may_allow(const ModelAction * writer, const ModelAction *reader) {
1627 if (!writer->is_rmw())
1630 if (!reader->is_rmw())
1633 for (const ModelAction *search = writer->get_reads_from(); search != NULL; search = search->get_reads_from()) {
1634 if (search == reader)
1636 if (search->get_tid() == reader->get_tid() &&
1637 search->happens_before(reader))
1645 * Arbitrary reads from the future are not allowed. Section 29.3 part 9 places
1646 * some constraints. This method checks one the following constraint (others
1647 * require compiler support):
1649 * If X --hb-> Y --mo-> Z, then X should not read from Z.
1651 bool ModelChecker::mo_may_allow(const ModelAction *writer, const ModelAction *reader)
1653 std::vector<action_list_t> *thrd_lists = get_safe_ptr_vect_action(obj_thrd_map, reader->get_location());
1655 /* Iterate over all threads */
1656 for (i = 0; i < thrd_lists->size(); i++) {
1657 const ModelAction *write_after_read = NULL;
1659 /* Iterate over actions in thread, starting from most recent */
1660 action_list_t *list = &(*thrd_lists)[i];
1661 action_list_t::reverse_iterator rit;
1662 for (rit = list->rbegin(); rit != list->rend(); rit++) {
1663 ModelAction *act = *rit;
1665 if (!reader->happens_before(act))
1667 else if (act->is_write())
1668 write_after_read = act;
1669 else if (act->is_read() && act->get_reads_from() != NULL && act != reader) {
1670 write_after_read = act->get_reads_from();
1674 if (write_after_read && write_after_read!=writer && mo_graph->checkReachable(write_after_read, writer))
1681 * Finds the head(s) of the release sequence(s) containing a given ModelAction.
1682 * The ModelAction under consideration is expected to be taking part in
1683 * release/acquire synchronization as an object of the "reads from" relation.
1684 * Note that this can only provide release sequence support for RMW chains
1685 * which do not read from the future, as those actions cannot be traced until
1686 * their "promise" is fulfilled. Similarly, we may not even establish the
1687 * presence of a release sequence with certainty, as some modification order
1688 * constraints may be decided further in the future. Thus, this function
1689 * "returns" two pieces of data: a pass-by-reference vector of @a release_heads
1690 * and a boolean representing certainty.
1692 * @param rf The action that might be part of a release sequence. Must be a
1694 * @param release_heads A pass-by-reference style return parameter. After
1695 * execution of this function, release_heads will contain the heads of all the
1696 * relevant release sequences, if any exists with certainty
1697 * @param pending A pass-by-reference style return parameter which is only used
1698 * when returning false (i.e., uncertain). Returns most information regarding
1699 * an uncertain release sequence, including any write operations that might
1700 * break the sequence.
1701 * @return true, if the ModelChecker is certain that release_heads is complete;
1704 bool ModelChecker::release_seq_heads(const ModelAction *rf,
1705 rel_heads_list_t *release_heads,
1706 struct release_seq *pending) const
1708 /* Only check for release sequences if there are no cycles */
1709 if (mo_graph->checkForCycles())
1713 ASSERT(rf->is_write());
1715 if (rf->is_release())
1716 release_heads->push_back(rf);
1718 break; /* End of RMW chain */
1720 /** @todo Need to be smarter here... In the linux lock
1721 * example, this will run to the beginning of the program for
1723 /** @todo The way to be smarter here is to keep going until 1
1724 * thread has a release preceded by an acquire and you've seen
1727 /* acq_rel RMW is a sufficient stopping condition */
1728 if (rf->is_acquire() && rf->is_release())
1729 return true; /* complete */
1731 rf = rf->get_reads_from();
1734 /* read from future: need to settle this later */
1736 return false; /* incomplete */
1739 if (rf->is_release())
1740 return true; /* complete */
1742 /* else relaxed write; check modification order for contiguous subsequence
1743 * -> rf must be same thread as release */
1744 int tid = id_to_int(rf->get_tid());
1745 std::vector<action_list_t> *thrd_lists = get_safe_ptr_vect_action(obj_thrd_map, rf->get_location());
1746 action_list_t *list = &(*thrd_lists)[tid];
1747 action_list_t::const_reverse_iterator rit;
1749 /* Find rf in the thread list */
1750 rit = std::find(list->rbegin(), list->rend(), rf);
1751 ASSERT(rit != list->rend());
1753 /* Find the last write/release */
1754 for (; rit != list->rend(); rit++)
1755 if ((*rit)->is_release())
1757 if (rit == list->rend()) {
1758 /* No write-release in this thread */
1759 return true; /* complete */
1761 ModelAction *release = *rit;
1763 ASSERT(rf->same_thread(release));
1765 pending->writes.clear();
1767 bool certain = true;
1768 for (unsigned int i = 0; i < thrd_lists->size(); i++) {
1769 if (id_to_int(rf->get_tid()) == (int)i)
1771 list = &(*thrd_lists)[i];
1773 /* Can we ensure no future writes from this thread may break
1774 * the release seq? */
1775 bool future_ordered = false;
1777 ModelAction *last = get_last_action(int_to_id(i));
1778 Thread *th = get_thread(int_to_id(i));
1779 if ((last && rf->happens_before(last)) ||
1782 future_ordered = true;
1784 ASSERT(!th->is_model_thread() || future_ordered);
1786 for (rit = list->rbegin(); rit != list->rend(); rit++) {
1787 const ModelAction *act = *rit;
1788 /* Reach synchronization -> this thread is complete */
1789 if (act->happens_before(release))
1791 if (rf->happens_before(act)) {
1792 future_ordered = true;
1796 /* Only non-RMW writes can break release sequences */
1797 if (!act->is_write() || act->is_rmw())
1800 /* Check modification order */
1801 if (mo_graph->checkReachable(rf, act)) {
1802 /* rf --mo--> act */
1803 future_ordered = true;
1806 if (mo_graph->checkReachable(act, release))
1807 /* act --mo--> release */
1809 if (mo_graph->checkReachable(release, act) &&
1810 mo_graph->checkReachable(act, rf)) {
1811 /* release --mo-> act --mo--> rf */
1812 return true; /* complete */
1814 /* act may break release sequence */
1815 pending->writes.push_back(act);
1818 if (!future_ordered)
1819 certain = false; /* This thread is uncertain */
1823 release_heads->push_back(release);
1824 pending->writes.clear();
1826 pending->release = release;
1833 * A public interface for getting the release sequence head(s) with which a
1834 * given ModelAction must synchronize. This function only returns a non-empty
1835 * result when it can locate a release sequence head with certainty. Otherwise,
1836 * it may mark the internal state of the ModelChecker so that it will handle
1837 * the release sequence at a later time, causing @a act to update its
1838 * synchronization at some later point in execution.
1839 * @param act The 'acquire' action that may read from a release sequence
1840 * @param release_heads A pass-by-reference return parameter. Will be filled
1841 * with the head(s) of the release sequence(s), if they exists with certainty.
1842 * @see ModelChecker::release_seq_heads
1844 void ModelChecker::get_release_seq_heads(ModelAction *act, rel_heads_list_t *release_heads)
1846 const ModelAction *rf = act->get_reads_from();
1847 struct release_seq *sequence = (struct release_seq *)snapshot_calloc(1, sizeof(struct release_seq));
1848 sequence->acquire = act;
1850 if (!release_seq_heads(rf, release_heads, sequence)) {
1851 /* add act to 'lazy checking' list */
1852 pending_rel_seqs->push_back(sequence);
1854 snapshot_free(sequence);
1859 * Attempt to resolve all stashed operations that might synchronize with a
1860 * release sequence for a given location. This implements the "lazy" portion of
1861 * determining whether or not a release sequence was contiguous, since not all
1862 * modification order information is present at the time an action occurs.
1864 * @param location The location/object that should be checked for release
1865 * sequence resolutions. A NULL value means to check all locations.
1866 * @param work_queue The work queue to which to add work items as they are
1868 * @return True if any updates occurred (new synchronization, new mo_graph
1871 bool ModelChecker::resolve_release_sequences(void *location, work_queue_t *work_queue)
1873 bool updated = false;
1874 std::vector< struct release_seq *, SnapshotAlloc<struct release_seq *> >::iterator it = pending_rel_seqs->begin();
1875 while (it != pending_rel_seqs->end()) {
1876 struct release_seq *pending = *it;
1877 ModelAction *act = pending->acquire;
1879 /* Only resolve sequences on the given location, if provided */
1880 if (location && act->get_location() != location) {
1885 const ModelAction *rf = act->get_reads_from();
1886 rel_heads_list_t release_heads;
1888 complete = release_seq_heads(rf, &release_heads, pending);
1889 for (unsigned int i = 0; i < release_heads.size(); i++) {
1890 if (!act->has_synchronized_with(release_heads[i])) {
1891 if (act->synchronize_with(release_heads[i]))
1894 set_bad_synchronization();
1899 /* Re-check all pending release sequences */
1900 work_queue->push_back(CheckRelSeqWorkEntry(NULL));
1901 /* Re-check act for mo_graph edges */
1902 work_queue->push_back(MOEdgeWorkEntry(act));
1904 /* propagate synchronization to later actions */
1905 action_list_t::reverse_iterator rit = action_trace->rbegin();
1906 for (; (*rit) != act; rit++) {
1907 ModelAction *propagate = *rit;
1908 if (act->happens_before(propagate)) {
1909 propagate->synchronize_with(act);
1910 /* Re-check 'propagate' for mo_graph edges */
1911 work_queue->push_back(MOEdgeWorkEntry(propagate));
1916 it = pending_rel_seqs->erase(it);
1917 snapshot_free(pending);
1923 // If we resolved promises or data races, see if we have realized a data race.
1930 * Performs various bookkeeping operations for the current ModelAction. For
1931 * instance, adds action to the per-object, per-thread action vector and to the
1932 * action trace list of all thread actions.
1934 * @param act is the ModelAction to add.
1936 void ModelChecker::add_action_to_lists(ModelAction *act)
1938 int tid = id_to_int(act->get_tid());
1939 action_trace->push_back(act);
1941 get_safe_ptr_action(obj_map, act->get_location())->push_back(act);
1943 std::vector<action_list_t> *vec = get_safe_ptr_vect_action(obj_thrd_map, act->get_location());
1944 if (tid >= (int)vec->size())
1945 vec->resize(priv->next_thread_id);
1946 (*vec)[tid].push_back(act);
1948 if ((int)thrd_last_action->size() <= tid)
1949 thrd_last_action->resize(get_num_threads());
1950 (*thrd_last_action)[tid] = act;
1952 if (act->is_wait()) {
1953 void *mutex_loc=(void *) act->get_value();
1954 get_safe_ptr_action(obj_map, mutex_loc)->push_back(act);
1956 std::vector<action_list_t> *vec = get_safe_ptr_vect_action(obj_thrd_map, mutex_loc);
1957 if (tid >= (int)vec->size())
1958 vec->resize(priv->next_thread_id);
1959 (*vec)[tid].push_back(act);
1961 if ((int)thrd_last_action->size() <= tid)
1962 thrd_last_action->resize(get_num_threads());
1963 (*thrd_last_action)[tid] = act;
1968 * @brief Get the last action performed by a particular Thread
1969 * @param tid The thread ID of the Thread in question
1970 * @return The last action in the thread
1972 ModelAction * ModelChecker::get_last_action(thread_id_t tid) const
1974 int threadid = id_to_int(tid);
1975 if (threadid < (int)thrd_last_action->size())
1976 return (*thrd_last_action)[id_to_int(tid)];
1982 * Gets the last memory_order_seq_cst write (in the total global sequence)
1983 * performed on a particular object (i.e., memory location), not including the
1985 * @param curr The current ModelAction; also denotes the object location to
1987 * @return The last seq_cst write
1989 ModelAction * ModelChecker::get_last_seq_cst_write(ModelAction *curr) const
1991 void *location = curr->get_location();
1992 action_list_t *list = get_safe_ptr_action(obj_map, location);
1993 /* Find: max({i in dom(S) | seq_cst(t_i) && isWrite(t_i) && samevar(t_i, t)}) */
1994 action_list_t::reverse_iterator rit;
1995 for (rit = list->rbegin(); rit != list->rend(); rit++)
1996 if ((*rit)->is_write() && (*rit)->is_seqcst() && (*rit) != curr)
2002 * Gets the last memory_order_seq_cst fence (in the total global sequence)
2003 * performed in a particular thread, prior to a particular fence.
2004 * @param tid The ID of the thread to check
2005 * @param before_fence The fence from which to begin the search; if NULL, then
2006 * search for the most recent fence in the thread.
2007 * @return The last prior seq_cst fence in the thread, if exists; otherwise, NULL
2009 ModelAction * ModelChecker::get_last_seq_cst_fence(thread_id_t tid, const ModelAction *before_fence) const
2011 /* All fences should have NULL location */
2012 action_list_t *list = get_safe_ptr_action(obj_map, NULL);
2013 action_list_t::reverse_iterator rit = list->rbegin();
2016 for (; rit != list->rend(); rit++)
2017 if (*rit == before_fence)
2020 ASSERT(*rit == before_fence);
2024 for (; rit != list->rend(); rit++)
2025 if ((*rit)->is_fence() && (tid == (*rit)->get_tid()) && (*rit)->is_seqcst())
2031 * Gets the last unlock operation performed on a particular mutex (i.e., memory
2032 * location). This function identifies the mutex according to the current
2033 * action, which is presumed to perform on the same mutex.
2034 * @param curr The current ModelAction; also denotes the object location to
2036 * @return The last unlock operation
2038 ModelAction * ModelChecker::get_last_unlock(ModelAction *curr) const
2040 void *location = curr->get_location();
2041 action_list_t *list = get_safe_ptr_action(obj_map, location);
2042 /* Find: max({i in dom(S) | isUnlock(t_i) && samevar(t_i, t)}) */
2043 action_list_t::reverse_iterator rit;
2044 for (rit = list->rbegin(); rit != list->rend(); rit++)
2045 if ((*rit)->is_unlock() || (*rit)->is_wait())
2050 ModelAction * ModelChecker::get_parent_action(thread_id_t tid) const
2052 ModelAction *parent = get_last_action(tid);
2054 parent = get_thread(tid)->get_creation();
2059 * Returns the clock vector for a given thread.
2060 * @param tid The thread whose clock vector we want
2061 * @return Desired clock vector
2063 ClockVector * ModelChecker::get_cv(thread_id_t tid) const
2065 return get_parent_action(tid)->get_cv();
2069 * Resolve a set of Promises with a current write. The set is provided in the
2070 * Node corresponding to @a write.
2071 * @param write The ModelAction that is fulfilling Promises
2072 * @return True if promises were resolved; false otherwise
2074 bool ModelChecker::resolve_promises(ModelAction *write)
2076 bool resolved = false;
2077 std::vector< thread_id_t, ModelAlloc<thread_id_t> > threads_to_check;
2079 for (unsigned int i = 0, promise_index = 0; promise_index < promises->size(); i++) {
2080 Promise *promise = (*promises)[promise_index];
2081 if (write->get_node()->get_promise(i)) {
2082 ModelAction *read = promise->get_action();
2083 if (read->is_rmw()) {
2084 mo_graph->addRMWEdge(write, read);
2086 read->read_from(write);
2087 //First fix up the modification order for actions that happened
2089 r_modification_order(read, write);
2090 //Next fix up the modification order for actions that happened
2092 post_r_modification_order(read, write);
2093 //Make sure the promise's value matches the write's value
2094 ASSERT(promise->get_value() == write->get_value());
2097 promises->erase(promises->begin() + promise_index);
2098 threads_to_check.push_back(read->get_tid());
2105 //Check whether reading these writes has made threads unable to
2108 for(unsigned int i=0;i<threads_to_check.size();i++)
2109 mo_check_promises(threads_to_check[i], write);
2115 * Compute the set of promises that could potentially be satisfied by this
2116 * action. Note that the set computation actually appears in the Node, not in
2118 * @param curr The ModelAction that may satisfy promises
2120 void ModelChecker::compute_promises(ModelAction *curr)
2122 for (unsigned int i = 0; i < promises->size(); i++) {
2123 Promise *promise = (*promises)[i];
2124 const ModelAction *act = promise->get_action();
2125 if (!act->happens_before(curr) &&
2127 !act->could_synchronize_with(curr) &&
2128 !act->same_thread(curr) &&
2129 act->get_location() == curr->get_location() &&
2130 promise->get_value() == curr->get_value()) {
2131 curr->get_node()->set_promise(i, act->is_rmw());
2136 /** Checks promises in response to change in ClockVector Threads. */
2137 void ModelChecker::check_promises(thread_id_t tid, ClockVector *old_cv, ClockVector *merge_cv)
2139 for (unsigned int i = 0; i < promises->size(); i++) {
2140 Promise *promise = (*promises)[i];
2141 const ModelAction *act = promise->get_action();
2142 if ((old_cv == NULL || !old_cv->synchronized_since(act)) &&
2143 merge_cv->synchronized_since(act)) {
2144 if (promise->increment_threads(tid)) {
2145 //Promise has failed
2146 priv->failed_promise = true;
2153 void ModelChecker::check_promises_thread_disabled() {
2154 for (unsigned int i = 0; i < promises->size(); i++) {
2155 Promise *promise = (*promises)[i];
2156 if (promise->check_promise()) {
2157 priv->failed_promise = true;
2163 /** Checks promises in response to addition to modification order for threads.
2165 * pthread is the thread that performed the read that created the promise
2167 * pread is the read that created the promise
2169 * pwrite is either the first write to same location as pread by
2170 * pthread that is sequenced after pread or the value read by the
2171 * first read to the same lcoation as pread by pthread that is
2172 * sequenced after pread..
2174 * 1. If tid=pthread, then we check what other threads are reachable
2175 * through the mode order starting with pwrite. Those threads cannot
2176 * perform a write that will resolve the promise due to modification
2177 * order constraints.
2179 * 2. If the tid is not pthread, we check whether pwrite can reach the
2180 * action write through the modification order. If so, that thread
2181 * cannot perform a future write that will resolve the promise due to
2182 * modificatin order constraints.
2184 * @parem tid The thread that either read from the model action
2185 * write, or actually did the model action write.
2187 * @parem write The ModelAction representing the relevant write.
2190 void ModelChecker::mo_check_promises(thread_id_t tid, const ModelAction *write) {
2191 void * location = write->get_location();
2192 for (unsigned int i = 0; i < promises->size(); i++) {
2193 Promise *promise = (*promises)[i];
2194 const ModelAction *act = promise->get_action();
2196 //Is this promise on the same location?
2197 if ( act->get_location() != location )
2200 //same thread as the promise
2201 if ( act->get_tid()==tid ) {
2203 //do we have a pwrite for the promise, if not, set it
2204 if (promise->get_write() == NULL ) {
2205 promise->set_write(write);
2206 //The pwrite cannot happen before the promise
2207 if (write->happens_before(act) && (write != act)) {
2208 priv->failed_promise = true;
2212 if (mo_graph->checkPromise(write, promise)) {
2213 priv->failed_promise = true;
2218 //Don't do any lookups twice for the same thread
2219 if (promise->has_sync_thread(tid))
2222 if (promise->get_write()&&mo_graph->checkReachable(promise->get_write(), write)) {
2223 if (promise->increment_threads(tid)) {
2224 priv->failed_promise = true;
2232 * Compute the set of writes that may break the current pending release
2233 * sequence. This information is extracted from previou release sequence
2236 * @param curr The current ModelAction. Must be a release sequence fixup
2239 void ModelChecker::compute_relseq_breakwrites(ModelAction *curr)
2241 if (pending_rel_seqs->empty())
2244 struct release_seq *pending = pending_rel_seqs->back();
2245 for (unsigned int i = 0; i < pending->writes.size(); i++) {
2246 const ModelAction *write = pending->writes[i];
2247 curr->get_node()->add_relseq_break(write);
2250 /* NULL means don't break the sequence; just synchronize */
2251 curr->get_node()->add_relseq_break(NULL);
2255 * Build up an initial set of all past writes that this 'read' action may read
2256 * from. This set is determined by the clock vector's "happens before"
2258 * @param curr is the current ModelAction that we are exploring; it must be a
2261 void ModelChecker::build_reads_from_past(ModelAction *curr)
2263 std::vector<action_list_t> *thrd_lists = get_safe_ptr_vect_action(obj_thrd_map, curr->get_location());
2265 ASSERT(curr->is_read());
2267 ModelAction *last_sc_write = NULL;
2269 /* Track whether this object has been initialized */
2270 bool initialized = false;
2272 if (curr->is_seqcst()) {
2273 last_sc_write = get_last_seq_cst_write(curr);
2274 /* We have to at least see the last sequentially consistent write,
2275 so we are initialized. */
2276 if (last_sc_write != NULL)
2280 /* Iterate over all threads */
2281 for (i = 0; i < thrd_lists->size(); i++) {
2282 /* Iterate over actions in thread, starting from most recent */
2283 action_list_t *list = &(*thrd_lists)[i];
2284 action_list_t::reverse_iterator rit;
2285 for (rit = list->rbegin(); rit != list->rend(); rit++) {
2286 ModelAction *act = *rit;
2288 /* Only consider 'write' actions */
2289 if (!act->is_write() || act == curr)
2292 /* Don't consider more than one seq_cst write if we are a seq_cst read. */
2293 bool allow_read = true;
2295 if (curr->is_seqcst() && (act->is_seqcst() || (last_sc_write != NULL && act->happens_before(last_sc_write))) && act != last_sc_write)
2297 else if (curr->get_sleep_flag() && !curr->is_seqcst() && !sleep_can_read_from(curr, act))
2301 DEBUG("Adding action to may_read_from:\n");
2302 if (DBG_ENABLED()) {
2306 curr->get_node()->add_read_from(act);
2309 /* Include at most one act per-thread that "happens before" curr */
2310 if (act->happens_before(curr)) {
2318 assert_bug("May read from uninitialized atomic");
2320 if (DBG_ENABLED() || !initialized) {
2321 model_print("Reached read action:\n");
2323 model_print("Printing may_read_from\n");
2324 curr->get_node()->print_may_read_from();
2325 model_print("End printing may_read_from\n");
2329 bool ModelChecker::sleep_can_read_from(ModelAction * curr, const ModelAction *write) {
2331 Node *prevnode=write->get_node()->get_parent();
2333 bool thread_sleep=prevnode->enabled_status(curr->get_tid())==THREAD_SLEEP_SET;
2334 if (write->is_release()&&thread_sleep)
2336 if (!write->is_rmw()) {
2339 if (write->get_reads_from()==NULL)
2341 write=write->get_reads_from();
2345 static void print_list(action_list_t *list, int exec_num = -1)
2347 action_list_t::iterator it;
2349 model_print("---------------------------------------------------------------------\n");
2351 model_print("Execution %d:\n", exec_num);
2353 unsigned int hash=0;
2355 for (it = list->begin(); it != list->end(); it++) {
2357 hash=hash^(hash<<3)^((*it)->hash());
2359 model_print("HASH %u\n", hash);
2360 model_print("---------------------------------------------------------------------\n");
2363 #if SUPPORT_MOD_ORDER_DUMP
2364 void ModelChecker::dumpGraph(char *filename) {
2366 sprintf(buffer, "%s.dot",filename);
2367 FILE *file=fopen(buffer, "w");
2368 fprintf(file, "digraph %s {\n",filename);
2369 mo_graph->dumpNodes(file);
2370 ModelAction ** thread_array=(ModelAction **)model_calloc(1, sizeof(ModelAction *)*get_num_threads());
2372 for (action_list_t::iterator it = action_trace->begin(); it != action_trace->end(); it++) {
2373 ModelAction *action=*it;
2374 if (action->is_read()) {
2375 fprintf(file, "N%u [label=\"%u, T%u\"];\n", action->get_seq_number(),action->get_seq_number(), action->get_tid());
2376 if (action->get_reads_from()!=NULL)
2377 fprintf(file, "N%u -> N%u[label=\"rf\", color=red];\n", action->get_seq_number(), action->get_reads_from()->get_seq_number());
2379 if (thread_array[action->get_tid()] != NULL) {
2380 fprintf(file, "N%u -> N%u[label=\"sb\", color=blue];\n", thread_array[action->get_tid()]->get_seq_number(), action->get_seq_number());
2383 thread_array[action->get_tid()]=action;
2385 fprintf(file,"}\n");
2386 model_free(thread_array);
2391 /** @brief Prints an execution trace summary. */
2392 void ModelChecker::print_summary() const
2394 #if SUPPORT_MOD_ORDER_DUMP
2396 char buffername[100];
2397 sprintf(buffername, "exec%04u", stats.num_total);
2398 mo_graph->dumpGraphToFile(buffername);
2399 sprintf(buffername, "graph%04u", stats.num_total);
2400 dumpGraph(buffername);
2403 if (!isfeasibleprefix())
2404 model_print("INFEASIBLE EXECUTION!\n");
2405 print_list(action_trace, stats.num_total);
2410 * Add a Thread to the system for the first time. Should only be called once
2412 * @param t The Thread to add
2414 void ModelChecker::add_thread(Thread *t)
2416 thread_map->put(id_to_int(t->get_id()), t);
2417 scheduler->add_thread(t);
2421 * Removes a thread from the scheduler.
2422 * @param the thread to remove.
2424 void ModelChecker::remove_thread(Thread *t)
2426 scheduler->remove_thread(t);
2430 * @brief Get a Thread reference by its ID
2431 * @param tid The Thread's ID
2432 * @return A Thread reference
2434 Thread * ModelChecker::get_thread(thread_id_t tid) const
2436 return thread_map->get(id_to_int(tid));
2440 * @brief Get a reference to the Thread in which a ModelAction was executed
2441 * @param act The ModelAction
2442 * @return A Thread reference
2444 Thread * ModelChecker::get_thread(ModelAction *act) const
2446 return get_thread(act->get_tid());
2450 * @brief Check if a Thread is currently enabled
2451 * @param t The Thread to check
2452 * @return True if the Thread is currently enabled
2454 bool ModelChecker::is_enabled(Thread *t) const
2456 return scheduler->is_enabled(t);
2460 * @brief Check if a Thread is currently enabled
2461 * @param tid The ID of the Thread to check
2462 * @return True if the Thread is currently enabled
2464 bool ModelChecker::is_enabled(thread_id_t tid) const
2466 return scheduler->is_enabled(tid);
2470 * Switch from a user-context to the "master thread" context (a.k.a. system
2471 * context). This switch is made with the intention of exploring a particular
2472 * model-checking action (described by a ModelAction object). Must be called
2473 * from a user-thread context.
2475 * @param act The current action that will be explored. May be NULL only if
2476 * trace is exiting via an assertion (see ModelChecker::set_assert and
2477 * ModelChecker::has_asserted).
2478 * @return Return status from the 'swap' call (i.e., success/fail, 0/-1)
2480 int ModelChecker::switch_to_master(ModelAction *act)
2483 Thread *old = thread_current();
2484 set_current_action(act);
2485 old->set_state(THREAD_READY);
2486 return Thread::swap(old, &system_context);
2490 * Takes the next step in the execution, if possible.
2491 * @return Returns true (success) if a step was taken and false otherwise.
2493 bool ModelChecker::take_step() {
2497 Thread *curr = priv->current_action ? get_thread(priv->current_action) : NULL;
2499 if (curr->get_state() == THREAD_READY) {
2500 ASSERT(priv->current_action);
2502 priv->nextThread = check_current_action(priv->current_action);
2503 priv->current_action = NULL;
2505 if (curr->is_blocked() || curr->is_complete())
2506 scheduler->remove_thread(curr);
2511 Thread *next = scheduler->next_thread(priv->nextThread);
2513 /* Infeasible -> don't take any more steps */
2514 if (is_infeasible())
2516 else if (isfeasibleprefix() && have_bug_reports()) {
2521 if (params.bound != 0) {
2522 if (priv->used_sequence_numbers > params.bound) {
2527 DEBUG("(%d, %d)\n", curr ? id_to_int(curr->get_id()) : -1,
2528 next ? id_to_int(next->get_id()) : -1);
2531 * Launch end-of-execution release sequence fixups only when there are:
2533 * (1) no more user threads to run (or when execution replay chooses
2534 * the 'model_thread')
2535 * (2) pending release sequences
2536 * (3) pending assertions (i.e., data races)
2537 * (4) no pending promises
2539 if (!pending_rel_seqs->empty() && (!next || next->is_model_thread()) &&
2540 is_feasible_prefix_ignore_relseq() && !unrealizedraces.empty()) {
2541 model_print("*** WARNING: release sequence fixup action (%zu pending release seuqences) ***\n",
2542 pending_rel_seqs->size());
2543 ModelAction *fixup = new ModelAction(MODEL_FIXUP_RELSEQ,
2544 std::memory_order_seq_cst, NULL, VALUE_NONE,
2546 set_current_action(fixup);
2550 /* next == NULL -> don't take any more steps */
2554 next->set_state(THREAD_RUNNING);
2556 if (next->get_pending() != NULL) {
2557 /* restart a pending action */
2558 set_current_action(next->get_pending());
2559 next->set_pending(NULL);
2560 next->set_state(THREAD_READY);
2564 /* Return false only if swap fails with an error */
2565 return (Thread::swap(&system_context, next) == 0);
2568 /** Wrapper to run the user's main function, with appropriate arguments */
2569 void user_main_wrapper(void *)
2571 user_main(model->params.argc, model->params.argv);
2574 /** @brief Run ModelChecker for the user program */
2575 void ModelChecker::run()
2580 /* Start user program */
2581 add_thread(new Thread(&user_thread, &user_main_wrapper, NULL));
2583 /* Wait for all threads to complete */
2584 while (take_step());
2585 } while (next_execution());