| C MP+onceassign+derefonce |
| |
| (* |
| * Result: Never |
| * |
| * This litmus test demonstrates that rcu_assign_pointer() and |
| * rcu_dereference() suffice to ensure that an RCU reader will not see |
| * pre-initialization garbage when it traverses an RCU-protected data |
| * structure containing a newly inserted element. |
| *) |
| |
| { |
| p=y; |
| } |
| |
| P0(int *x, int **p) // Producer |
| { |
| WRITE_ONCE(*x, 1); |
| rcu_assign_pointer(*p, x); |
| } |
| |
| P1(int *x, int **p) // Consumer |
| { |
| int *r0; |
| int r1; |
| |
| rcu_read_lock(); |
| r0 = rcu_dereference(*p); |
| r1 = READ_ONCE(*r0); |
| rcu_read_unlock(); |
| } |
| |
| exists (1:r0=x /\ 1:r1=0) (* Bad outcome. *) |