Changes in / [db4062d:270fdcf]
- File:
-
- 1 edited
-
doc/papers/concurrency/Paper.tex (modified) (33 diffs)
Legend:
- Unmodified
- Added
- Removed
-
doc/papers/concurrency/Paper.tex
rdb4062d r270fdcf 271 271 Hence, there are two problems to be solved: concurrency and parallelism. 272 272 While these two concepts are often combined, they are distinct, requiring different tools~\cite[\S~2]{Buhr05a}. 273 Concurrency tools handle mutual exclusion and synchronization, while parallelism tools handle performance, cost,and resource utilization.273 Concurrency tools handle synchronization and mutual exclusion, while parallelism tools handle performance, cost and resource utilization. 274 274 275 275 The proposed concurrency API is implemented in a dialect of C, called \CFA. … … 282 282 Extended versions and explanation of the following code examples are available at the \CFA website~\cite{Cforall} or in Moss~\etal~\cite{Moss18}. 283 283 284 \CFA is a non-object-orientedextension of ISO-C, and hence, supports all C paradigms.284 \CFA is an extension of ISO-C, and hence, supports all C paradigms. 285 285 %It is a non-object-oriented system-language, meaning most of the major abstractions have either no runtime overhead or can be opted out easily. 286 Like C, the b uilding blocks of \CFA arestructures and routines.286 Like C, the basics of \CFA revolve around structures and routines. 287 287 Virtually all of the code generated by the \CFA translator respects C memory layouts and calling conventions. 288 288 While \CFA is not an object-oriented language, lacking the concept of a receiver (\eg @this@) and nominal inheritance-relationships, C does have a notion of objects: ``region of data storage in the execution environment, the contents of which can represent values''~\cite[3.15]{C11}. … … 296 296 int x = 1, y = 2, z = 3; 297 297 int * p1 = &x, ** p2 = &p1, *** p3 = &p2, $\C{// pointers to x}$ 298 `&` r1 = x, `&&` r2 = r1,`&&&` r3 = r2; $\C{// references to x}$298 `&` r1 = x, `&&` r2 = r1, `&&&` r3 = r2; $\C{// references to x}$ 299 299 int * p4 = &z, `&` r4 = z; 300 300 … … 411 411 \end{cquote} 412 412 Overloading is important for \CFA concurrency since the runtime system relies on creating different types to represent concurrency objects. 413 Therefore, overloading eliminateslong prefixes and other naming conventions to prevent name clashes.413 Therefore, overloading is necessary to prevent the need for long prefixes and other naming conventions to prevent name clashes. 414 414 As seen in Section~\ref{basics}, routine @main@ is heavily overloaded. 415 For example, variable overloading is useful in the parallel semantics of the @with@ statement for fields with the same name: 415 416 Variable overloading is useful in the parallel semantics of the @with@ statement for fields with the same name: 416 417 \begin{cfa} 417 418 struct S { int `i`; int j; double m; } s; … … 427 428 } 428 429 \end{cfa} 429 For parallel semantics, both @s.i@ and @t.i@ are visible withthe same type, so only @i@ is ambiguous without qualification.430 For parallel semantics, both @s.i@ and @t.i@ are visible the same type, so only @i@ is ambiguous without qualification. 430 431 431 432 … … 467 468 \end{cquote} 468 469 While concurrency does not use operator overloading directly, it provides an introduction for the syntax of constructors. 470 471 472 \subsection{Parametric Polymorphism} 473 \label{s:ParametricPolymorphism} 474 475 The signature feature of \CFA is parametric-polymorphic routines~\cite{} with routines generalized using a @forall@ clause (giving the language its name), which allow separately compiled routines to support generic usage over multiple types. 476 For example, the following sum routine works for any type that supports construction from 0 and addition: 477 \begin{cfa} 478 forall( otype T | { void `?{}`( T *, zero_t ); T `?+?`( T, T ); } ) // constraint type, 0 and + 479 T sum( T a[$\,$], size_t size ) { 480 `T` total = { `0` }; $\C{// initialize by 0 constructor}$ 481 for ( size_t i = 0; i < size; i += 1 ) 482 total = total `+` a[i]; $\C{// select appropriate +}$ 483 return total; 484 } 485 S sa[5]; 486 int i = sum( sa, 5 ); $\C{// use S's 0 construction and +}$ 487 \end{cfa} 488 489 \CFA provides \newterm{traits} to name a group of type assertions, where the trait name allows specifying the same set of assertions in multiple locations, preventing repetition mistakes at each routine declaration: 490 \begin{cfa} 491 trait `sumable`( otype T ) { 492 void `?{}`( T &, zero_t ); $\C{// 0 literal constructor}$ 493 T `?+?`( T, T ); $\C{// assortment of additions}$ 494 T ?+=?( T &, T ); 495 T ++?( T & ); 496 T ?++( T & ); 497 }; 498 forall( otype T `| sumable( T )` ) $\C{// use trait}$ 499 T sum( T a[$\,$], size_t size ); 500 \end{cfa} 501 502 Assertions can be @otype@ or @dtype@. 503 @otype@ refers to a ``complete'' object, \ie an object has a size, default constructor, copy constructor, destructor and an assignment operator. 504 @dtype@ only guarantees an object has a size and alignment. 505 506 Using the return type for discrimination, it is possible to write a type-safe @alloc@ based on the C @malloc@: 507 \begin{cfa} 508 forall( dtype T | sized(T) ) T * alloc( void ) { return (T *)malloc( sizeof(T) ); } 509 int * ip = alloc(); $\C{// select type and size from left-hand side}$ 510 double * dp = alloc(); 511 struct S {...} * sp = alloc(); 512 \end{cfa} 513 where the return type supplies the type/size of the allocation, which is impossible in most type systems. 469 514 470 515 … … 495 540 \CFA also provides @new@ and @delete@, which behave like @malloc@ and @free@, in addition to constructing and destructing objects: 496 541 \begin{cfa} 497 { 498 ... struct S s = {10}; ... $\C{// allocation, call constructor}$542 { struct S s = {10}; $\C{// allocation, call constructor}$ 543 ... 499 544 } $\C{// deallocation, call destructor}$ 500 545 struct S * s = new(); $\C{// allocation, call constructor}$ … … 502 547 delete( s ); $\C{// deallocation, call destructor}$ 503 548 \end{cfa} 504 \CFA concurrency uses object lifetime as a means of mutual exclusion and/or synchronization. 505 506 507 \subsection{Parametric Polymorphism} 508 \label{s:ParametricPolymorphism} 509 510 The signature feature of \CFA is parametric-polymorphic routines~\cite{} with routines generalized using a @forall@ clause (giving the language its name), which allow separately compiled routines to support generic usage over multiple types. 511 For example, the following sum routine works for any type that supports construction from 0 and addition: 512 \begin{cfa} 513 forall( otype T | { void `?{}`( T *, zero_t ); T `?+?`( T, T ); } ) // constraint type, 0 and + 514 T sum( T a[$\,$], size_t size ) { 515 `T` total = { `0` }; $\C{// initialize by 0 constructor}$ 516 for ( size_t i = 0; i < size; i += 1 ) 517 total = total `+` a[i]; $\C{// select appropriate +}$ 518 return total; 519 } 520 S sa[5]; 521 int i = sum( sa, 5 ); $\C{// use S's 0 construction and +}$ 522 \end{cfa} 523 The builtin type @zero_t@ (and @one_t@) overload constant 0 (and 1) for a new types, where both 0 and 1 have special meaning in C. 524 525 \CFA provides \newterm{traits} to name a group of type assertions, where the trait name allows specifying the same set of assertions in multiple locations, preventing repetition mistakes at each routine declaration: 526 \begin{cfa} 527 trait `sumable`( otype T ) { 528 void `?{}`( T &, zero_t ); $\C{// 0 literal constructor}$ 529 T `?+?`( T, T ); $\C{// assortment of additions}$ 530 T ?+=?( T &, T ); 531 T ++?( T & ); 532 T ?++( T & ); 533 }; 534 forall( otype T `| sumable( T )` ) $\C{// use trait}$ 535 T sum( T a[$\,$], size_t size ); 536 \end{cfa} 537 538 Assertions can be @otype@ or @dtype@. 539 @otype@ refers to a ``complete'' object, \ie an object has a size, default constructor, copy constructor, destructor and an assignment operator. 540 @dtype@ only guarantees an object has a size and alignment. 541 542 Using the return type for discrimination, it is possible to write a type-safe @alloc@ based on the C @malloc@: 543 \begin{cfa} 544 forall( dtype T | sized(T) ) T * alloc( void ) { return (T *)malloc( sizeof(T) ); } 545 int * ip = alloc(); $\C{// select type and size from left-hand side}$ 546 double * dp = alloc(); 547 struct S {...} * sp = alloc(); 548 \end{cfa} 549 where the return type supplies the type/size of the allocation, which is impossible in most type systems. 549 \CFA concurrency uses object lifetime as a means of synchronization and/or mutual exclusion. 550 550 551 551 … … 727 727 728 728 Using a coroutine, it is possible to express the Fibonacci formula directly without any of the C problems. 729 Figure~\ref{f:Coroutine3States} creates a @coroutine@ type, @`coroutine` Fib { int fn; }@, which provides communication, @fn@, for the \newterm{coroutine main}, @main@, which runs on the coroutine stack, and possibly multiple interface routines, \eg @next@. 729 Figure~\ref{f:Coroutine3States} creates a @coroutine@ type: 730 \begin{cfa} 731 `coroutine` Fib { int fn; }; 732 \end{cfa} 733 which provides communication, @fn@, for the \newterm{coroutine main}, @main@, which runs on the coroutine stack, and possibly multiple interface routines @next@. 730 734 Like the structure in Figure~\ref{f:ExternalState}, the coroutine type allows multiple instances, where instances of this type are passed to the (overloaded) coroutine main. 731 The coroutine main's stack holds the state for the next generation, @f1@ and @f2@, and the code has the three suspend points, representing the three states in the Fibonacci formula, to context switch back to the caller's @resume@.735 The coroutine main's stack holds the state for the next generation, @f1@ and @f2@, and the code has the three suspend points, representing the three states in the Fibonacci formula, to context switch back to the caller's resume. 732 736 The interface routine @next@, takes a Fibonacci instance and context switches to it using @resume@; 733 737 on restart, the Fibonacci field, @fn@, contains the next value in the sequence, which is returned. … … 839 843 \end{figure} 840 844 841 The previous examples are \newterm{asymmetric (semi) coroutine}s because one coroutine always calls a resuming routine for another coroutine, and the resumed coroutine always suspends back to its last resumer, similar to call/return for normal routines .842 However, @resume@/@suspend@ context switch to existing stack-frames rather than create new ones so there is no stack growth.845 The previous examples are \newterm{asymmetric (semi) coroutine}s because one coroutine always calls a resuming routine for another coroutine, and the resumed coroutine always suspends back to its last resumer, similar to call/return for normal routines 846 However, there is no stack growth because @resume@/@suspend@ context switch to existing stack-frames rather than create new ones. 843 847 \newterm{Symmetric (full) coroutine}s have a coroutine call a resuming routine for another coroutine, which eventually forms a resuming-call cycle. 844 848 (The trivial cycle is a coroutine resuming itself.) … … 929 933 The producer call to @delivery@ transfers values into the consumer's communication variables, resumes the consumer, and returns the consumer status. 930 934 For the first resume, @cons@'s stack is initialized, creating local variables retained between subsequent activations of the coroutine. 931 The consumer iterates until the @done@ flag is set, prints the values delivered by the producer, increments status, and calls back to the producer via @payment@, and on return from @payment@, prints the receipt from the producer and increments @money@ (inflation).935 The consumer iterates until the @done@ flag is set, prints, increments status, and calls back to the producer via @payment@, and on return from @payment@, prints the receipt from the producer and increments @money@ (inflation). 932 936 The call from the consumer to the @payment@ introduces the cycle between producer and consumer. 933 937 When @payment@ is called, the consumer copies values into the producer's communication variable and a resume is executed. … … 959 963 \end{cfa} 960 964 and the programming language (and possibly its tool set, \eg debugger) may need to understand @baseCoroutine@ because of the stack. 961 Furthermore, the execution of constructs/destructors is in the wrong order for certain operations .962 For example, for threadsif the thread is implicitly started, it must start \emph{after} all constructors, because the thread relies on a completely initialized object, but the inherited constructor runs \emph{before} the derived.965 Furthermore, the execution of constructs/destructors is in the wrong order for certain operations, \eg for threads; 966 \eg, if the thread is implicitly started, it must start \emph{after} all constructors, because the thread relies on a completely initialized object, but the inherited constructor runs \emph{before} the derived. 963 967 964 968 An alternatively is composition: … … 980 984 symmetric_coroutine<>::yield_type 981 985 \end{cfa} 982 Similarly, the canonical threading paradigm is often based on routine pointers, \eg @pthread s@~\cite{pthreads}, \Csharp~\cite{Csharp}, Go~\cite{Go}, and Scala~\cite{Scala}.986 Similarly, the canonical threading paradigm is often based on routine pointers, \eg @pthread@~\cite{pthreads}, \Csharp~\cite{Csharp}, Go~\cite{Go}, and Scala~\cite{Scala}. 983 987 However, the generic thread-handle (identifier) is limited (few operations), unless it is wrapped in a custom type. 984 988 \begin{cfa} … … 997 1001 Note, the type @coroutine_t@ must be an abstract handle to the coroutine, because the coroutine descriptor and its stack are non-copyable. 998 1002 Copying the coroutine descriptor results in copies being out of date with the current state of the stack. 999 Correspondingly, copying the stack results is copies being out of date with thecoroutine descriptor, and pointers in the stack being out of date to data on the stack.1003 Correspondingly, copying the stack results is copies being out of date with coroutine descriptor, and pointers in the stack being out of date to data on the stack. 1000 1004 (There is no mechanism in C to find all stack-specific pointers and update them as part of a copy.) 1001 1005 … … 1011 1015 Furthermore, implementing coroutines without language supports also displays the power of a programming language. 1012 1016 While this is ultimately the option used for idiomatic \CFA code, coroutines and threads can still be constructed without using the language support. 1013 The reserved keyword simplyeases use for the common cases.1017 The reserved keyword eases use for the common cases. 1014 1018 1015 1019 Part of the mechanism to generalize coroutines is using a \CFA trait, which defines a coroutine as anything satisfying the trait @is_coroutine@, and this trait is used to restrict coroutine-manipulation routines: … … 1026 1030 The @main@ routine has no return value or additional parameters because the coroutine type allows an arbitrary number of interface routines with corresponding arbitrary typed input/output values versus fixed ones. 1027 1031 The generic routines @suspend@ and @resume@ can be redefined, but any object passed to them is a coroutine since it must satisfy the @is_coroutine@ trait to compile. 1028 The advantage of this approach is that users can easily create different types of coroutines, \egchanging the memory layout of a coroutine is trivial when implementing the @get_coroutine@ routine, and possibly redefining @suspend@ and @resume@.1032 The advantage of this approach is that users can easily create different types of coroutines, for example, changing the memory layout of a coroutine is trivial when implementing the @get_coroutine@ routine, and possibly redefining @suspend@ and @resume@. 1029 1033 The \CFA keyword @coroutine@ implicitly implements the getter and forward declarations required for implementing the coroutine main: 1030 1034 \begin{cquote} … … 1094 1098 The difference is that a coroutine borrows a thread from its caller, so the first thread resuming a coroutine creates an instance of @main@; 1095 1099 whereas, a user thread receives its own thread from the runtime system, which starts in @main@ as some point after the thread constructor is run.\footnote{ 1096 The \lstinline@main@ routine is already a special routine in C , \ie where the program's initial thread begins, so it is a natural extension of this semantics to use overloading to declare \lstinline@main@s for user coroutines and threads.}1100 The \lstinline@main@ routine is already a special routine in C (where the program begins), so it is a natural extension of the semantics to use overloading to declare mains for different coroutines/threads (the normal main being the main of the initial thread).} 1097 1101 No return value or additional parameters are necessary for this routine because the task type allows an arbitrary number of interface routines with corresponding arbitrary typed input/output values. 1098 1102 … … 1185 1189 void main( Adder & adder ) with( adder ) { 1186 1190 subtotal = 0; 1187 for ( int c = 0; c < cols; c += 1 ) { subtotal += row[c]; } 1191 for ( int c = 0; c < cols; c += 1 ) { 1192 subtotal += row[c]; 1193 } 1188 1194 } 1189 1195 int main() { … … 1210 1216 1211 1217 Uncontrolled non-deterministic execution is meaningless. 1212 To reestablish meaningful execution requires mechanisms to reintroduce determinism , \ie restrict non-determinism, called mutual exclusion and synchronization, where mutual exclusion is an access-control mechanism on data shared by threads, and synchronization is a timing relationship among threads~\cite[\S~4]{Buhr05a}.1218 To reestablish meaningful execution requires mechanisms to reintroduce determinism (\ie restrict non-determinism), called mutual exclusion and synchronization, where mutual exclusion is an access-control mechanism on data shared by threads, and synchronization is a timing relationship among threads~\cite[\S~4]{Buhr05a}. 1213 1219 Since many deterministic challenges appear with the use of mutable shared state, some languages/libraries disallow it, \eg Erlang~\cite{Erlang}, Haskell~\cite{Haskell}, Akka~\cite{Akka} (Scala). 1214 In these paradigms, interaction among concurrent objects is performed by stateless message-passing~\cite{Thoth,Harmony,V-Kernel} or other paradigms closely relate to networking concepts , \eg channels~\cite{CSP,Go}.1215 However, in call/return-based languages, these approaches force a clear distinction , \ie introduce a new programming paradigm, between regular and concurrent computation, \eg routine call versus message passing.1220 In these paradigms, interaction among concurrent objects is performed by stateless message-passing~\cite{Thoth,Harmony,V-Kernel} or other paradigms closely relate to networking concepts (\eg channels~\cite{CSP,Go}). 1221 However, in call/return-based languages, these approaches force a clear distinction (\ie introduce a new programming paradigm) between regular and concurrent computation (\ie routine call versus message passing). 1216 1222 Hence, a programmer must learn and manipulate two sets of design patterns. 1217 1223 While this distinction can be hidden away in library code, effective use of the library still has to take both paradigms into account. … … 1238 1244 However, many solutions exist for mutual exclusion, which vary in terms of performance, flexibility and ease of use. 1239 1245 Methods range from low-level locks, which are fast and flexible but require significant attention for correctness, to higher-level concurrency techniques, which sacrifice some performance to improve ease of use. 1240 Ease of use comes by either guaranteeing some problems cannot occur , \eg deadlock free, or by offering a more explicit coupling between shared data and critical section.1241 For example, the \CC @std::atomic<T>@ offers an easy way to express mutual-exclusion on a restricted set of operations , \eg reading/writing,for numerical types.1246 Ease of use comes by either guaranteeing some problems cannot occur (\eg deadlock free), or by offering a more explicit coupling between shared data and critical section. 1247 For example, the \CC @std::atomic<T>@ offers an easy way to express mutual-exclusion on a restricted set of operations (\eg reading/writing) for numerical types. 1242 1248 However, a significant challenge with locks is composability because it takes careful organization for multiple locks to be used while preventing deadlock. 1243 1249 Easing composability is another feature higher-level mutual-exclusion mechanisms can offer. … … 1248 1254 Synchronization enforces relative ordering of execution, and synchronization tools provide numerous mechanisms to establish these timing relationships. 1249 1255 Low-level synchronization primitives offer good performance and flexibility at the cost of ease of use; 1250 higher-level mechanisms often simplify usage by adding better coupling between synchronization and data , \eg message passing, or offering a simpler solution to otherwise involved challenges, \eg barrier lock.1256 higher-level mechanisms often simplify usage by adding better coupling between synchronization and data (\eg message passing), or offering a simpler solution to otherwise involved challenges, \eg barrier lock. 1251 1257 Often synchronization is used to order access to a critical section, \eg ensuring a reader thread is the next kind of thread to enter a critical section. 1252 1258 If a writer thread is scheduled for next access, but another reader thread acquires the critical section first, that reader has \newterm{barged}. … … 1266 1272 The strong association with the call/return paradigm eases programmability, readability and maintainability, at a slight cost in flexibility and efficiency. 1267 1273 1268 Note, like coroutines/threads, both locks and monitors require an abstract handle to reference them, because at their core, both mechanisms are manipulating non-copyable shared -state.1274 Note, like coroutines/threads, both locks and monitors require an abstract handle to reference them, because at their core, both mechanisms are manipulating non-copyable shared state. 1269 1275 Copying a lock is insecure because it is possible to copy an open lock and then use the open copy when the original lock is closed to simultaneously access the shared data. 1270 1276 Copying a monitor is secure because both the lock and shared data are copies, but copying the shared data is meaningless because it no longer represents a unique entity. … … 1369 1375 \end{cfa} 1370 1376 (While object-oriented monitors can be extended with a mutex qualifier for multiple-monitor members, no prior example of this feature could be found.) 1371 In practice, writing multi-locking routines that do not deadlock is tricky.1377 In practice, writing multi-locking routines that do not deadlocks is tricky. 1372 1378 Having language support for such a feature is therefore a significant asset for \CFA. 1373 1379 1374 1380 The capability to acquire multiple locks before entering a critical section is called \newterm{bulk acquire}. 1375 In theprevious example, \CFA guarantees the order of acquisition is consistent across calls to different routines using the same monitors as arguments.1381 In previous example, \CFA guarantees the order of acquisition is consistent across calls to different routines using the same monitors as arguments. 1376 1382 This consistent ordering means acquiring multiple monitors is safe from deadlock. 1377 1383 However, users can force the acquiring order. … … 1389 1395 In the calls to @bar@ and @baz@, the monitors are acquired in opposite order. 1390 1396 1391 However, such use leads to lock acquiring order problems resulting in deadlock~\cite{Lister77}, where detecting it requires dynamically tracking of monitor calls, and dealing with it requires rollback semantics~\cite{Dice10}.1397 However, such use leads to lock acquiring order problems resulting in deadlock~\cite{Lister77}, where detecting it requires dynamically tracking of monitor calls, and dealing with it requires implement rollback semantics~\cite{Dice10}. 1392 1398 In \CFA, safety is guaranteed by using bulk acquire of all monitors to shared objects, whereas other monitor systems provide no aid. 1393 1399 While \CFA provides only a partial solution, the \CFA partial solution handles many useful cases. … … 1434 1440 1435 1441 1436 \section{ Scheduling}1437 \label{s: Scheduling}1442 \section{Internal Scheduling} 1443 \label{s:InternalScheduling} 1438 1444 1439 1445 While monitor mutual-exclusion provides safe access to shared data, the monitor data may indicate that a thread accessing it cannot proceed. … … 1448 1454 The appropriate condition lock is signalled to unblock an opposite kind of thread after an element is inserted/removed from the buffer. 1449 1455 Signalling is unconditional, because signalling an empty condition lock does nothing. 1450 1451 1456 Signalling semantics cannot have the signaller and signalled thread in the monitor simultaneously, which means: 1452 1457 \begin{enumerate} … … 1458 1463 The signalling thread blocks but is marked for urgrent unblocking at the next scheduling point and the signalled thread continues. 1459 1464 \end{enumerate} 1460 The first approach is too restrictive, as it precludes solving a reasonable class of problems , \eg dating service.1465 The first approach is too restrictive, as it precludes solving a reasonable class of problems (\eg dating service). 1461 1466 \CFA supports the next two semantics as both are useful. 1462 1467 Finally, while it is common to store a @condition@ as a field of the monitor, in \CFA, a @condition@ variable can be created/stored independently. … … 1534 1539 If the buffer is full, only calls to @remove@ can acquire the buffer, and if the buffer is empty, only calls to @insert@ can acquire the buffer. 1535 1540 Threads making calls to routines that are currently excluded block outside (external) of the monitor on a calling queue, versus blocking on condition queues inside (internal) of the monitor. 1536 % External scheduling is more constrained and explicit, which helps programmers reduce the non-deterministic nature of concurrency.1537 External scheduling allows users to wait for events from other threads without concern of unrelated events occurring.1538 The mechnaism can be done in terms of control flow, \eg Ada @accept@ or \uC @_Accept@, or in terms of data, \eg Go channels.1539 Of course, both of these paradigms have their own strengths and weaknesses, but for this project, control-flow semantics was chosen to stay consistent with the rest of the languages semantics.1540 Two challenges specific to \CFA arise when trying to add external scheduling with loose object definitions and multiple-monitor routines.1541 The previous example shows a simple use @_Accept@ versus @wait@/@signal@ and its advantages.1542 Note that while other languages often use @accept@/@select@ as the core external scheduling keyword, \CFA uses @waitfor@ to prevent name collisions with existing socket \textbf{api}s.1543 1541 1544 1542 For internal scheduling, non-blocking signalling (as in the producer/consumer example) is used when the signaller is providing the cooperation for a waiting thread; 1545 1543 the signaller enters the monitor and changes state, detects a waiting threads that can use the state, performs a non-blocking signal on the condition queue for the waiting thread, and exits the monitor to run concurrently. 1546 The waiter unblocks next, uses/takes the state, and exits the monitor.1544 The waiter unblocks next, takes the state, and exits the monitor. 1547 1545 Blocking signalling is the reverse, where the waiter is providing the cooperation for the signalling thread; 1548 1546 the signaller enters the monitor, detects a waiting thread providing the necessary state, performs a blocking signal to place it on the urgent queue and unblock the waiter. 1549 The waiter changes state and exits the monitor, and the signaller unblocks next from the urgent queue to use/take the state.1547 The waiter changes state and exits the monitor, and the signaller unblocks next from the urgent queue to take the state. 1550 1548 1551 1549 Figure~\ref{f:DatingService} shows a dating service demonstrating the two forms of signalling: non-blocking and blocking. 1552 1550 The dating service matches girl and boy threads with matching compatibility codes so they can exchange phone numbers. 1553 1551 A thread blocks until an appropriate partner arrives. 1554 The complexity is exchanging phone number in the monitor because the monitor mutual-exclusion property prevents exchanging numbers. 1555 For internal scheduling, the @exchange@ condition is necessary to block the thread finding the match, while the matcher unblocks to take the oppose number, post its phone number, and unblock the partner. 1556 For external scheduling, the implicit urgent-condition replaces the explict @exchange@-condition and @signal_block@ puts the finding thread on the urgent condition and unblocks the matcher.. 1557 1558 The dating service is an example of a monitor that cannot be written using external scheduling because it requires knowledge of calling parameters to make scheduling decisions, and parameters of waiting threads are unavailable; 1559 as well, an arriving thread may not find a partner and must wait, which requires a condition variable, and condition variables imply internal scheduling. 1552 The complexity is exchanging phone number in the monitor, 1553 While the non-barging monitor prevents a caller from stealing a phone number, the monitor mutual-exclusion property 1554 1555 The dating service is an example of a monitor that cannot be written using external scheduling because: 1556 1557 The example in table \ref{tbl:datingservice} highlights the difference in behaviour. 1558 As mentioned, @signal@ only transfers ownership once the current critical section exits; this behaviour requires additional synchronization when a two-way handshake is needed. 1559 To avoid this explicit synchronization, the @condition@ type offers the @signal_block@ routine, which handles the two-way handshake as shown in the example. 1560 This feature removes the need for a second condition variables and simplifies programming. 1561 Like every other monitor semantic, @signal_block@ uses barging prevention, which means mutual-exclusion is baton-passed both on the front end and the back end of the call to @signal_block@, meaning no other thread can acquire the monitor either before or after the call. 1560 1562 1561 1563 \begin{figure} … … 1653 1655 } 1654 1656 \end{cfa} 1655 must have acquired monitor locks that are greater than or equal to the number of locks for the waiting thread signalled from the condition queue.1656 {\color{red}In general, the signaller does not know the order of waiting threads, so in general, it must acquire the maximum number of mutex locks for the worst-case waiting thread.} 1657 must have acquired monitor locks that are greater than or equal to the number of locks for the waiting thread signalled from the front of the condition queue. 1658 In general, the signaller does not know the order of waiting threads, so in general, it must acquire the maximum number of mutex locks for the worst-case waiting thread. 1657 1659 1658 1660 Similarly, for @waitfor( rtn )@, the default semantics is to atomically block the acceptor and release all acquired mutex types in the parameter list, \ie @waitfor( rtn, m1, m2 )@. … … 1665 1667 void foo( M & mutex m1, M & mutex m2 ) { 1666 1668 ... wait( `e, m1` ); ... $\C{// release m1, keeping m2 acquired )}$ 1667 void ba r( M & mutex m1, M & mutex m2 ) { $\C{// must acquire m1 and m2 )}$1669 void baz( M & mutex m1, M & mutex m2 ) { $\C{// must acquire m1 and m2 )}$ 1668 1670 ... signal( `e` ); ... 1669 1671 \end{cfa} 1670 The @wait@ only releases @m1@ so the signalling thread cannot acquire both @m1@ and @m2@ to enter @ba r@ to get to the @signal@.1672 The @wait@ only releases @m1@ so the signalling thread cannot acquire both @m1@ and @m2@ to enter @baz@ to get to the @signal@. 1671 1673 While deadlock issues can occur with multiple/nesting acquisition, this issue results from the fact that locks, and by extension monitors, are not perfectly composable. 1672 1674 … … 1753 1755 However, Figure~\ref{f:OtherWaitingThread} shows this solution is complex depending on other waiters, resulting is choices when the signaller finishes the inner mutex-statement. 1754 1756 The singaller can retain @m2@ until completion of the outer mutex statement and pass the locks to waiter W1, or it can pass @m2@ to waiter W2 after completing the inner mutex-statement, while continuing to hold @m1@. 1755 In the latter case, waiter W2 must eventually pass @m2@ to waiter W1, which is complex because W 1 may have waited before W2, so W2 is unaware of it.1757 In the latter case, waiter W2 must eventually pass @m2@ to waiter W1, which is complex because W2 may have waited before W1 so it is unaware of W1. 1756 1758 Furthermore, there is an execution sequence where the signaller always finds waiter W2, and hence, waiter W1 starves. 1757 1759 … … 1859 1861 1860 1862 1863 \section{External scheduling} \label{extsched} 1864 1865 An alternative to internal scheduling is external scheduling (see Table~\ref{tbl:sched}). 1866 1861 1867 \begin{comment} 1862 \section{External scheduling} \label{extsched}1863 1864 1868 \begin{table} 1865 1869 \begin{tabular}{|c|c|c|} … … 1925 1929 \label{tbl:sched} 1926 1930 \end{table} 1931 \end{comment} 1932 1933 This method is more constrained and explicit, which helps users reduce the non-deterministic nature of concurrency. 1934 Indeed, as the following examples demonstrate, external scheduling allows users to wait for events from other threads without the concern of unrelated events occurring. 1935 External scheduling can generally be done either in terms of control flow (\eg Ada with @accept@, \uC with @_Accept@) or in terms of data (\eg Go with channels). 1936 Of course, both of these paradigms have their own strengths and weaknesses, but for this project, control-flow semantics was chosen to stay consistent with the rest of the languages semantics. 1937 Two challenges specific to \CFA arise when trying to add external scheduling with loose object definitions and multiple-monitor routines. 1938 The previous example shows a simple use @_Accept@ versus @wait@/@signal@ and its advantages. 1939 Note that while other languages often use @accept@/@select@ as the core external scheduling keyword, \CFA uses @waitfor@ to prevent name collisions with existing socket \textbf{api}s. 1927 1940 1928 1941 For the @P@ member above using internal scheduling, the call to @wait@ only guarantees that @V@ is the last routine to access the monitor, allowing a third routine, say @isInUse()@, acquire mutual exclusion several times while routine @P@ is waiting. 1929 1942 On the other hand, external scheduling guarantees that while routine @P@ is waiting, no other routine than @V@ can acquire the monitor. 1930 \end{comment} 1931 1932 1943 1944 % ====================================================================== 1945 % ====================================================================== 1933 1946 \subsection{Loose Object Definitions} 1934 1947 % ====================================================================== 1948 % ====================================================================== 1935 1949 In \uC, a monitor class declaration includes an exhaustive list of monitor operations. 1936 1950 Since \CFA is not object oriented, monitors become both more difficult to implement and less clear for a user:
Note:
See TracChangeset
for help on using the changeset viewer.