From: Claude Code Review Bot <claude-review@example.com>
To: dri-devel-reviews@example.com
Subject: Claude review: drm/bridge: add drm_bridge_clear_and_put()
Date: Wed, 11 Mar 2026 13:16:32 +1000 [thread overview]
Message-ID: <review-overall-20260310-drm-bridge-atomic-vs-remove-clear_and_put-v2-0-51fe222f3cf0@bootlin.com> (raw)
In-Reply-To: <20260310-drm-bridge-atomic-vs-remove-clear_and_put-v2-0-51fe222f3cf0@bootlin.com>
Overall Series Review
Subject: drm/bridge: add drm_bridge_clear_and_put()
Author: Luca Ceresoli <luca.ceresoli@bootlin.com>
Patches: 3
Reviewed: 2026-03-11T13:16:32.078777
---
This is a clean, well-motivated 2-patch series that adds a `drm_bridge_clear_and_put()` helper and converts the first user (samsung-dsim) to it. The series is part of ongoing DRM bridge hotplug work. The code is simple, the documentation is thorough, and the conversion in patch 2 is straightforward.
**One significant concern**: the commit message and documentation claim this function prevents a "use-after-free window" in concurrent scenarios, but the implementation uses plain C pointer reads and writes with no memory ordering guarantees (no `WRITE_ONCE`, `smp_store_release`, or similar). If another CPU is concurrently reading `*bridge_pp`, the compiler could reorder or cache the store, and the CPU could make it visible after the `kref_put`. For the stated concurrency goal to actually hold, the NULL store should use `WRITE_ONCE()` at minimum to prevent compiler tearing/reordering, and callers reading the pointer should use `READ_ONCE()`. Without that, the "no use-after-free window" claim is not fully guaranteed by the C memory model on SMP systems.
That said, looking at the current samsung-dsim usage sites (error path in `host_attach` and the `host_detach` path), these don't appear to have actual concurrent access to `next_bridge`, so the practical risk is low today. But if the goal is to build infrastructure for hotplug where concurrency *will* matter, this should be addressed now.
**Verdict**: The series is reasonable as-is for the current use cases, but if it's meant to be a concurrency-safe primitive for hotplug, it needs memory ordering annotations.
---
Generated by Claude Code Patch Reviewer
prev parent reply other threads:[~2026-03-11 3:16 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-03-10 12:13 [PATCH v2 0/2] drm/bridge: add drm_bridge_clear_and_put() Luca Ceresoli
2026-03-10 12:13 ` [PATCH v2 1/2] " Luca Ceresoli
2026-03-11 3:16 ` Claude review: " Claude Code Review Bot
2026-03-10 12:13 ` [PATCH v2 2/2] drm/bridge: samsung-dsim: use drm_bridge_clear_and_put() to put the next bridge Luca Ceresoli
2026-03-11 3:16 ` Claude review: " Claude Code Review Bot
2026-03-11 3:16 ` Claude Code Review Bot [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=review-overall-20260310-drm-bridge-atomic-vs-remove-clear_and_put-v2-0-51fe222f3cf0@bootlin.com \
--to=claude-review@example.com \
--cc=dri-devel-reviews@example.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox