Skip to content

Conversation

Manciukic
Copy link
Contributor

@Manciukic Manciukic commented Oct 17, 2025

Changes

When reading from a volatile memory into a WriteVolatile we should let the caller know if we managed to transfer some bytes. Currently, if the write encounters any error after the first iovec an error is returned, but some bytes are written. This causes issues in the caller, because it thinks no bytes were written.

In particular, this caused a bug in the vsock code on 6.17 guest kernels because these kernels started sending multiple iovecs. When sending 2 iovecs, it could happen that we'd get a WouldBlock error on the second, but the vsock code thought no bytes were transferre, leading to a spurious retransmission of the first iovec.

Reason

Fixes: #5475

License Acceptance

By submitting this pull request, I confirm that my contribution is made under
the terms of the Apache 2.0 license. For more information on following Developer
Certificate of Origin and signing off your commits, please check
CONTRIBUTING.md.

PR Checklist

  • I have read and understand CONTRIBUTING.md.
  • I have run tools/devtool checkbuild --all to verify that the PR passes
    build checks on all supported architectures.
  • I have run tools/devtool checkstyle to verify that the PR passes the
    automated style checks.
  • I have described what is done in these changes, why they are needed, and
    how they are solving the problem in a clear and encompassing way.
  • I have updated any relevant documentation (both in code and in the docs)
    in the PR.
  • I have mentioned all user-facing changes in CHANGELOG.md.
  • If a specific issue led to this PR, this PR closes the issue.
  • When making API changes, I have followed the
    Runbook for Firecracker API changes.
  • I have tested all new and changed functionalities in unit tests and/or
    integration tests.
  • I have linked an issue to every new TODO.

  • This functionality cannot be added in rust-vmm.

@codecov
Copy link

codecov bot commented Oct 17, 2025

Codecov Report

❌ Patch coverage is 95.00000% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 82.75%. Comparing base (a174746) to head (5c51e99).
⚠️ Report is 3 commits behind head on main.

Files with missing lines Patch % Lines
src/vmm/src/devices/virtio/iovec.rs 95.00% 1 Missing ⚠️
Additional details and impacted files
@@           Coverage Diff           @@
##             main    #5485   +/-   ##
=======================================
  Coverage   82.74%   82.75%           
=======================================
  Files         269      269           
  Lines       27798    27798           
=======================================
+ Hits        23001    23003    +2     
+ Misses       4797     4795    -2     
Flag Coverage Δ
5.10-m5n.metal 82.90% <95.00%> (+<0.01%) ⬆️
5.10-m6a.metal 82.18% <95.00%> (+0.01%) ⬆️
5.10-m6g.metal 79.57% <95.00%> (+<0.01%) ⬆️
5.10-m6i.metal 82.90% <95.00%> (+<0.01%) ⬆️
5.10-m7a.metal-48xl 82.16% <95.00%> (+<0.01%) ⬆️
5.10-m7g.metal 79.57% <95.00%> (+0.01%) ⬆️
5.10-m7i.metal-24xl 82.88% <95.00%> (+0.01%) ⬆️
5.10-m7i.metal-48xl 82.87% <95.00%> (+<0.01%) ⬆️
5.10-m8g.metal-24xl 79.57% <95.00%> (+<0.01%) ⬆️
5.10-m8g.metal-48xl 79.57% <95.00%> (+<0.01%) ⬆️
6.1-m5n.metal 82.93% <95.00%> (+<0.01%) ⬆️
6.1-m6a.metal 82.20% <95.00%> (+<0.01%) ⬆️
6.1-m6g.metal 79.57% <95.00%> (+<0.01%) ⬆️
6.1-m6i.metal 82.93% <95.00%> (+<0.01%) ⬆️
6.1-m7a.metal-48xl 82.19% <95.00%> (+<0.01%) ⬆️
6.1-m7g.metal 79.57% <95.00%> (+<0.01%) ⬆️
6.1-m7i.metal-24xl 82.95% <95.00%> (+0.01%) ⬆️
6.1-m7i.metal-48xl 82.94% <95.00%> (+<0.01%) ⬆️
6.1-m8g.metal-24xl 79.56% <95.00%> (+<0.01%) ⬆️
6.1-m8g.metal-48xl 79.56% <95.00%> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@Manciukic Manciukic marked this pull request as ready for review October 21, 2025 08:46
@Manciukic Manciukic added the Status: Awaiting review Indicates that a pull request is ready to be reviewed label Oct 21, 2025
When reading from a volatile memory into a WriteVolatile we should let
the caller know if we managed to transfer some bytes. Currently, if the
write encounters any error after the first iovec an error is returned,
but some bytes are written. This causes issues in the caller, because it
thinks no bytes were written.

In particular, this caused a bug in the vsock code on 6.17 guest kernels
because these kernels started sending multiple iovecs. When sending 2
iovecs, it could happen that we'd get a WouldBlock error on the second,
but the vsock code thought no bytes were transferre, leading to a
spurious retransmission of the first iovec.

Fixes: firecracker-microvm#5475

Signed-off-by: Riccardo Mancini <[email protected]>
As in the previous commit, the same erroneous pattern is present also in
write_volatile_at. Fix it there as well.

Signed-off-by: Riccardo Mancini <[email protected]>
Adds an entry to the changelog for the iovec fix.

Signed-off-by: Riccardo Mancini <[email protected]>
@bchalios bchalios merged commit a305f36 into firecracker-microvm:main Oct 21, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Status: Awaiting review Indicates that a pull request is ready to be reviewed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[vsock] guest -> host data corruption for guest kernel v6.17

3 participants