<div dir="ltr">Hi Ben,<br><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jan 8, 2016 at 7:25 AM, Ben Coman <span dir="ltr"><<a href="mailto:btc@openinworld.com" target="_blank">btc@openinworld.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span class=""><br>
On Fri, Jan 8, 2016 at 9:39 PM, Ben Coman <<a href="mailto:btc@openinworld.com">btc@openinworld.com</a>> wrote:<br>
> On Fri, Jan 8, 2016 at 5:42 PM, stephane ducasse<br>
> <<a href="mailto:stephane.ducasse@gmail.com">stephane.ducasse@gmail.com</a>> wrote:<br>
>><br>
>> I have a (stupid) question.<br>
>> Is the code running without the primitives?<br>
>> Are the code below the primitives correct?<br>
>> I asked that because we can have 100 eyes and brains on the smalltalk level and far less on the VM primitive level.<br>
><br>
> Because:<br>
> 1. Concurrency bugs can be subtle and the *exact* conditions can be<br>
> hard to reproduce for debugging. For example, the solution to a<br>
> couple of problems with Delay [1] [2] were solved by moving away from<br>
> Semaphore>>critical: to use signalling.<br>
><br>
> 2. The in-image atomicity of determining whether a signal was actually<br>
> consumed or not during process suspension/termination is awkward. Its<br>
> seems hard to *really* know for sure it right (but I haven't looked in<br>
> depth into Denis' latest proposals.)<br>
><br>
> 3. The existing in-image implementation of Semaphore>>critical messes<br>
> around in Process>>terminate in a *special* way that is not easy for<br>
> those 100 eyes to understand. For example, I personally am not<br>
> comfortable with understanding how the special Semaphore handling in<br>
> Process>>terminate works, but I can easily follow how<br>
> primitiveEnterCriticalSection just looking at the code [3].<br>
<br>
</span>Points 2 & 3 might possibly be addressed by having new primitiveWaitReturned<br>
*always* return true, so if the process is terminated while waiting,<br>
the assignment to signalConsumed doesn't occur...<br>
<br>
critical: mutuallyExcludedBlock<br>
signalConsumed := false.<br>
[<br>
signalConsumed := self primitiveWaitReturned.<br>
blockValue := mutuallyExcludedBlock value<br>
] ensure: [ signalConsumed ifTrue: [self signal] ].<br>
^blockValue<br>
<br>
where primitiveWait (<a href="https://git.io/vuDjd" rel="noreferrer" target="_blank">https://git.io/vuDjd</a>) is copied<br>
and (just guessing) the marked line added...<br></blockquote><div><br></div><div>That looks like a good idea. I'll try and take a look early next week.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
primitiveWaitReturned<br>
| sema excessSignals activeProc inInterpreter |<br>
sema := self stackTop. "rcvr"<br>
"==>>" self pop: argumentCount + 1 thenPush: objectMemory trueObject. "<<=="<br>
excessSignals := self fetchInteger: ExcessSignalsIndex ofObject: sema.<br>
excessSignals > 0<br>
ifTrue:<br>
[self storeInteger: ExcessSignalsIndex<br>
ofObject: sema<br>
withValue: excessSignals - 1]<br>
ifFalse:<br>
inInterpreter := instructionPointer >= objectMemory startOfMemory.<br>
activeProc := self activeProcess.<br>
self addLastLink: activeProc toList: sema.<br>
self transferTo: self wakeHighestPriority from: CSWait.<br>
self<br>
forProcessPrimitiveReturnToExecutivePostContextSwitch: inInterpreter]<br>
<br>
which I guess could be added quickly if Esteban could compile the<br>
latest pharo-spur-vm ;)<br></blockquote><div><br></div><div>If you built a Squeak VMMaker image via <a href="http://www.squeakvm.org/svn/squeak/branches/Cog/image/BuildSqueakSpurTrunkVMMakerImage.st">http://www.squeakvm.org/svn/squeak/branches/Cog/image/BuildSqueakSpurTrunkVMMakerImage.st</a> and built using the svn source tree you could do this yourself now.</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
cheers -ben<br>
<br>
> 4. Its faster<br>
<div class=""><div class="h5">><br>
> btw, Looking at the following...<br>
> CriticalSection>>critical: aBlock<br>
> ^self primitiveEnterCriticalSection<br>
> ifTrue: [aBlock value]<br>
> ifFalse: [aBlock ensure: [self primitiveExitCriticalSection]]<br>
><br>
> without intimate VM knowledge but seeing Eliot recently say<br>
> "invocations of methods with primitives [...] are not suspension<br>
> points, unless their primitives fail" -- I'm paranoid that since<br>
> #ensure: primitive 198 always fail, there might be some some small<br>
> window for a race where a process might be terminated before<br>
> #primitiveExitCriticalSection can be executed. I'll take a refutation<br>
> of this to improve the method comment.<br>
><br>
> The following instils more confidence...<br>
><br>
> CriticalSection2>>critical: aBlock<br>
> | reEntered |<br>
> reEntered := false.<br>
> [ reEntered := self primitiveEnterCriticalSection.<br>
> aBlock value ] ensure:<br>
> [ reEntered ifFalse: [ self primitiveExitCriticalSection] ]<br>
><br>
> but performance is reduced...<br>
> "#('Mutex -> 282,511 per second'<br>
> 'Monitor -> 479,217 per second'<br>
> 'CriticalSection -> 729,049 per second'<br>
> 'CriticalSection2 -> 571,631 per second')"<br>
><br>
> Then again, any termination from within a critical section is anyhow<br>
> problematic since potentially data structures are left in a<br>
> indeterminate state.<br>
><br>
> [1] <a href="http://forum.world.st/Super-fast-delay-td4787257.html" rel="noreferrer" target="_blank">http://forum.world.st/Super-fast-delay-td4787257.html</a><br>
> [2] <a href="https://pharo.fogbugz.com/default.asp?13755" rel="noreferrer" target="_blank">https://pharo.fogbugz.com/default.asp?13755</a><br>
> [3] <a href="https://git.io/vuDnA" rel="noreferrer" target="_blank">https://git.io/vuDnA</a><br>
><br>
> cheers -ben<br>
><br>
>><br>
>> Stef<br>
>><br>
>><br>
>><br>
>><br>
>> Hi Ben,<br>
>><br>
>> On Thu, Jan 7, 2016 at 10:39 AM, Ben Coman <<a href="mailto:btc@openinworld.com">btc@openinworld.com</a>>wrote:<br>
>>><br>
>>><br>
>>> On Fri, Jan 8, 2016 at 1:20 AM, Eliot Miranda <<a href="mailto:eliot.miranda@gmail.com">eliot.miranda@gmail.com</a>> wrote:<br>
>>> ><br>
>>> > and here's a version with a better class comment<br>
>>> ><br>
>>> > On Thu, Jan 7, 2016 at 9:12 AM, Eliot Miranda <<a href="mailto:eliot.miranda@gmail.com">eliot.miranda@gmail.com</a>> wrote:<br>
>>> >><br>
>>> >> Hi Denis, Hi Clément, Hi Frank,<br>
>>> >><br>
>>> >> On Thu, Jan 7, 2016 at 5:34 AM, Clément Bera <<a href="mailto:bera.clement@gmail.com">bera.clement@gmail.com</a>> wrote:<br>
>>> >>><br>
>>> >>> Hello,<br>
>>> >>><br>
>>> >>> Eliot, please, you told me you had the code and Denis is interested.<br>
>>> >>><br>
>>> >>> It uses 3 primitives for performance.<br>
>>> >><br>
>>> >><br>
>>> >> Forgive the delay. I thought it proper to ask permission since the code was written while I was at Qwaq. I'm attaching the code in a fairly raw state, see the attached. The code is MIT, but copyright 3DICC.<br>
>>> >><br>
>>> >> It is a plugin replacement for Squeak's Mutex, and with a little ingenuity could be a replacement for Squeak's Monitor. It is quicker because it uses three new primitives to manage entering a critical section and setting the owner, exiting the critical section and releasing the owner, and testing if a critical section, entering if the section is unowned. The use of the primitives means fewer block activations and ensure: blocks in entering and exiting the critical section, and that's the actual cause of the speed-up.<br>
>>> >><br>
>>> >> You can benchmark the code as is. Here are some results on 32-bit Spur, on my 2.2GHz Core i7<br>
>>> >><br>
>>> >> {Mutex new. Monitor new. CriticalSection new} collect:<br>
>>> >> [:cs| | n |<br>
>>> >> n := 0.<br>
>>> >> [cs critical: [n := n + 1]. cs critical: [n := n + 1]. cs critical: [n := n + 1]. cs critical: [n := n + 1]. cs critical: [n := n + 1].<br>
>>> >> cs critical: [n := n - 1]. cs critical: [n := n - 1]. cs critical: [n := n - 1]. cs critical: [n := n - 1]. cs critical: [n := n - 1].<br>
>>> >> n ] bench]<br>
>>> >><br>
>>> >> {Mutex new. Monitor new. CriticalSection new} collect:<br>
>>> >> [:cs| | n |<br>
>>> >> n := 0.<br>
>>> >> cs class name, ' -> ',<br>
>>> >> [cs critical: [n := n + 1]. cs critical: [n := n + 1]. cs critical: [n := n + 1]. cs critical: [n := n + 1]. cs critical: [n := n + 1].<br>
>>> >> cs critical: [n := n - 1]. cs critical: [n := n - 1]. cs critical: [n := n - 1]. cs critical: [n := n - 1]. cs critical: [n := n - 1].<br>
>>> >> n ] bench]<br>
>>> >><br>
>>> >> #( 'Mutex -> 440,000 per second. 2.27 microseconds per run.'<br>
>>> >> 'Monitor -> 688,000 per second. 1.45 microseconds per run.'<br>
>>> >> 'CriticalSection -> 1,110,000 per second. 900 nanoseconds per run.')<br>
>>> >><br>
>>><br>
>>> This is great Eliot. Thank you and 3DICC. After loading the changeset<br>
>>> into Pharo-50515 (32 bit Spur) I get the following results on my<br>
>>> laptop i5-2520M @ 2.50GHz<br>
>>><br>
>>> #('Mutex -> 254,047 per second'<br>
>>> 'Monitor -> 450,442 per second'<br>
>>> 'CriticalSection -> 683,393 per second')<br>
>>><br>
>>> In a fresh Image "Mutex allInstances basicInspect" lists just two mutexes...<br>
>>> 1. NetNameResolver-->ResolverMutex<br>
>>> 2. ThreadSafeTranscript-->accessSemaphore<br>
>><br>
>><br>
>> I hate myself for getting distracted but I'm finding this is un. One can migrate to the new representation using normal Monticello loads by<br>
>><br>
>> In the first version redefine Mutex and Monitor to subclass LinkedList and have their owner/ownerProcess inst var first (actually third after firstLink & lastLink), and add the primitives.<br>
>><br>
>> In the next version check that all Mutex and Monitor instanes are unowned and then redefine to discard excess inst vars<br>
>><br>
>> Let me test this before committing, and see that all tests are ok.<br>
>><br>
>>><br>
>>> cheers -ben<br>
>>><br>
>>> >> Replacement is probably trivial; rename Mutex to OldMutex, rename CriticalSection to Mutex, recompile. But there are lots of mutexes in the system and these are potentially owned. Transforming unowned ones is trivial, but transforming owned ones is, I think, impossible. But at least in my system there are no owned mutexes or monitors.<br>
>>> >><br>
>>> >> Frank (or anyone else), would you be interested in creating a replacement for Squeak's Monitor based on CriticalSection?<br>
>>> >><br>
>>> >><br>
>>> >> Here are the two business methods:<br>
>>> >> CriticalSection methods for mutual exclusion<br>
>>> >> critical: aBlock<br>
>>> >> "Evaluate aBlock protected by the receiver."<br>
>>> >> ^self primitiveEnterCriticalSection<br>
>>> >> ifTrue: [aBlock value]<br>
>>> >> ifFalse: [aBlock ensure: [self primitiveExitCriticalSection]]<br>
>>> >><br>
>>> >> critical: aBlock ifLocked: lockedBlock<br>
>>> >> "Answer the evaluation of aBlock protected by the receiver. If it is already in a critical<br>
>>> >> section on behalf of some other process answer the evaluation of lockedBlock."<br>
>>> >> ^self primitiveTestAndSetOwnershipOfCriticalSection<br>
>>> >> ifNil: [lockedBlock value]<br>
>>> >> ifNotNil:[:alreadyOwner|<br>
>>> >> alreadyOwner<br>
>>> >> ifTrue: [aBlock value]<br>
>>> >> ifFalse: [aBlock ensure: [self primitiveExitCriticalSection]]]<br>
>>> >><br>
>>> >> and the primitives:<br>
>>> >> CriticalSection methods for private-primitives<br>
>>> >> primitiveEnterCriticalSection<br>
>>> >> "Primitive. The receiver must be unowned or owned by the current process to proceed.<br>
>>> >> Answer if the process is owned by the current process."<br>
>>> >> <primitive: 186><br>
>>> >> self primitiveFailed<br>
>>> >> "In the spirit of the following"<br>
>>> >> "[owner ifNil:<br>
>>> >> [owner := Processor activeProcess.<br>
>>> >> ^false].<br>
>>> >> owner = Processor activeProcess ifTrue:<br>
>>> >> [^true].<br>
>>> >> self addLast: Processor activeProcess.<br>
>>> >> Processor activeProcess suspend] valueUnpreemptively"<br>
>>> >><br>
>>> >> primitiveExitCriticalSection<br>
>>> >> "Primitive. Set te receiver to unowned and if any processes are waiting on<br>
>>> >> the receiver then proceed the first one, indicating that the receiver is unowned."<br>
>>> >> <primitive: 185><br>
>>> >> self primitiveFailed<br>
>>> >> "In the spirit of the following"<br>
>>> >> "[owner := nil.<br>
>>> >> self isEmpty ifFalse:<br>
>>> >> [process := self removeFirst.<br>
>>> >> process resume]] valueUnpreemptively"<br>
>>> >><br>
>>> >> primitiveTestAndSetOwnershipOfCriticalSection<br>
>>> >> "Primitive. Attempt to set the ownership of the receiver.<br>
>>> >> If the receiver is unowned set its owningProcess to the<br>
>>> >> activeProcess and answer false. If the receiver is owned<br>
>>> >> by the activeProcess answer true. If the receiver is owned<br>
>>> >> by some other process answer nil."<br>
>>> >> <primitive: 187><br>
>>> >> self primitiveFail<br>
>>> >> "In the spirit of the following"<br>
>>> >> "[owner ifNil:<br>
>>> >> [owningProcess := Processor activeProcess.<br>
>>> >> ^false].<br>
>>> >> owner = Processor activeProcess ifTrue: [^true].<br>
>>> >> ^nil] valueUnpreemptively"<br>
>>> >><br>
>>> >>> 2016-01-07 13:24 GMT+01:00 Denis Kudriashov <<a href="mailto:dionisiydk@gmail.com">dionisiydk@gmail.com</a>>:<br>
>>> >>>><br>
>>> >>>><br>
>>> >>>> Hello.<br>
>>> >>>><br>
>>> >>>> I hear about new Monitor implementation based on new primitives.<br>
>>> >>>> Where to get it?<br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><span style="font-size:small;border-collapse:separate"><div>_,,,^..^,,,_<br></div><div>best, Eliot</div></span></div></div></div>
</div></div>