cpu/stm32_common/uart: Prevent uart from sending if not initialized#10615
cpu/stm32_common/uart: Prevent uart from sending if not initialized#10615leandrolanzieri merged 1 commit intoRIOT-OS:masterfrom
Conversation
dce43eb to
f1f34e3
Compare
|
Low impact fix that seems like it could help with other issues. It adds 12 bytes or so... |
f1f34e3 to
49db23e
Compare
leandrolanzieri
left a comment
There was a problem hiding this comment.
Tested on nucleo-f103rb and fixes the described issue.
|
Tested on a blue pill. Works as expected :-) Please wait 10 more minutes to let me also check on an F4, just to be sure. |
|
I will also note that if I do some sort of refactor in the future I will attempt to reduce the byte size for the uart. |
|
I can confirm that it also solves the issue on the MSB-IoT (stm32f415rg) :-) |
maribu
left a comment
There was a problem hiding this comment.
All good from my point of view :-)
| assert(uart < UART_NUMOF); | ||
|
|
||
| /* If tx is not enabled don't try to send */ | ||
| if (!(dev(uart)->CR1 & USART_CR1_TE)) { |
There was a problem hiding this comment.
I don't think this should be enabled always, but be an assertion.
There was a problem hiding this comment.
Well, assert() uses stdio as well. I'm not sure what would happen then. In any case, the user will not be able to "see" that the assertion failed, as no output over UART is available.
There was a problem hiding this comment.
mmm, I get the point. The problem is that having the UART fail silently will be very surprising for the user.
There was a problem hiding this comment.
I think the best user experience would be to make sure stdio becomes available as soon as possible. This would allow us using DEBUG() even in the initialization code of other stuff.
Maybe a good compromise would be to perform this check only when DEVELHELP is enabled. And also set some global flag (only present with DEVELHELP) when this occurs. At the very end of the initialization of stdio a check for that flag could be added (again, only with DEVELHELP) that would print a warning about lost stdio output.
There was a problem hiding this comment.
That's why I like error codes everywhere. As it stands the periphs get initialized before the uart does and attempting to write on certain boards locks it up in an infinite loop waiting for a flag. An assert would fail if added. Maybe that is the behavior we desire but then all periphs that want to be debugged and have something in the init would crash.
There was a problem hiding this comment.
I think the best user experience would be to make sure stdio becomes available as soon as possible.
100%. This PR is kind of a work-around for me. The fix would be to either to split board initialization:
RIOT/cpu/cortexm_common/vectors_cortexm.c
Lines 124 to 133 in b709e63
into two functions that get called before and after the libc init, or to make board init responsible for initializing the C library.
In any case it is not an easy task, that's why I'm posting this as a comment and not a review, I don't want to block a PR that would prevent a lockup.
There was a problem hiding this comment.
I think the best user experience would be to make sure
stdiobecomes available as soon as possible.
+1
There was a problem hiding this comment.
Can we agree that, yes this is a workaround to the initialization problem, however, it is still better to have a check before sending blindly?
I can be convinced out of it with the, it costs bytes and if someone sends without initializing first they are doing it wrong/not guaranteed, argument. Just keep in mind that RIOT has been doing that for a while now.
|
I think that performing that check only when |
49db23e to
be497c2
Compare
|
@maribu agreed, done! |
IMHO we should avoid introducing #ifdefs but rather should get rid of them ... anyway, won't block this
cpu/stm32_common/periph/uart.c
Outdated
| { | ||
| assert(uart < UART_NUMOF); | ||
|
|
||
| #if defined(DEVELHELP) |
There was a problem hiding this comment.
I'm personally in favor of not having any white space in front of preprocessor directives, because:
- C and C preprocessor macros are two completely distinct languages and keeping the indent of the C code surrounding it cannot be applied consistently. See example below
- Most C code does this. I'm in favor for keeping conventions, unless there is a reason for not doing so
- The rest of this file does not use white space in front of preprocessor directives
- Preprocessor directives become more visible, if the have a zero indent compared to the C code. And you really don't want to overlook them :-)
Here an example with unclear level of indent.
int foo(enum bar, int blah)
{
switch(bar) {
#ifdef MODULE_FOO /* <-- two levels of indent */
case some_enum_value:
some_function(blah);
break;
#endif /* <-- two or three levels of indent? */
}
}However, in the RIOT code base there are both files that do not use whitespace before preprocessor directives, and files that do use whitespace. So there is apparently no rule on it. So treat this comment as my personal opinion and not as a review.
There was a problem hiding this comment.
You could also use #ifdef DEVELHELP here...
There was a problem hiding this comment.
Ya, I should have checked that. I also made it just #if DEVELHELP, though I am not sure if that is preferred.
There was a problem hiding this comment.
I'm personally in favor of not having any white space in front of preprocessor directives, because:
I'm in favour of avoiding preprocessor directives if possible:
/* somewhere define a macro that is always defined */
#ifdef DEVELHELP
#define DEVELHELP_ON 1
#else
#define DEVELHELP_ON 0
#endif /* DEVELHELP */
/* then in the code you use a "real" if */
void uart_write(uart_t uart, const uint8_t *data, size_t len)
{
assert(uart < UART_NUMOF);
if (DEVELHELP_ON) {
/* If tx is not enabled don't try to send */
if (!(dev(uart)->CR1 & USART_CR1_TE)) {
return;
}
}
/* rest of the function */
}Isn't that much more readable? Also, you get the benefit of having the compiler SEE what is inside the if block always (even if it then gets thrown away.)
There was a problem hiding this comment.
I'm in favour of avoiding preprocessor directives if possible
Let me point out that your code contains 5 preprocessor directives, which are 3 more than the original code. (It also adds 5 lines of code.)
I personally think the original code was more readable.
There was a problem hiding this comment.
I also agree with @maribu, and for the sake of uniformity. I a bit think we are getting into a "lets delay this bugfix so we can be nit picky" territory.
...On that note I was thinking if it is a good idea to have something that would work if DEVELHELP==1 and crash if DEVELHELP==0. Can we assume if DEVELHELP==0 the uart will always be initialized first?
There was a problem hiding this comment.
Just to make sure I did understand you correct: By "DEVELHELP==1" you mean DEVELHELP is defined, and "DEVELHELP==0" means DEVELHELP is not defined, right?
The only reason for a valid (assert(uart < UART_NUMOF) did not trigger) not to be initialized seems to be it is used early in the boot up process. The only use case to me seems debug output via stdio. In production there should be no debug output of the early boot process. (E.g. sys/auto_init will run only after the periph buses and stdio is available, so there is not to much code running before stdio is available.)
So I believe it is safe to assume that when DEVELHELP is not defined that UARTs are not used before they are initialized.
There was a problem hiding this comment.
I will also post a follow-up PR for this
And also set some global flag (only present with
DEVELHELP) when this occurs. At the very end of the initialization ofstdioa check for that flag could be added (again, only withDEVELHELP) that would print a warning about loststdiooutput.
I'm not 100% sure this is required, but it could be helpful.
There was a problem hiding this comment.
I a bit think we are getting into a "lets delay this bugfix so we can be nit picky" territory.
No, because I have never blocked this PR.
There was a problem hiding this comment.
@maribu DEVELHELP==0 or 1 to me means make DEVELHELP=0 or make DEVELHELP=1, I thought that they were defined in both cases but maybe something in the make system undef if it is 0 or something.
That's fine for me to assume production code has the initialization sorted out.
Also thanks for taking over the follow up PR.
@jcarrano True, but the conversation is still ongoing and it seems like nobody wants to click that shiny button. I think sometime you can't make every developer happy though.
Due to the stdio getting called after periph_init the uart may send before initialized. This adds a simple check so the uart does not get into a locked-up state.
be497c2 to
96f8438
Compare
|
@leandrolanzieri Thanks for merging, now I can update the comment in the other PR! |
Contribution description
Due to the stdio getting called after periph_init the uart may send before initialized.
This adds a simple check so the uart does not get into a locked-up state.
Testing procedure
Use an stm32F1, F2, F4, or L0
Enable debug in tests/periph_i2c/main.c
Write a DEBUG message in the init.
BOARD=<selected board from above> make flash term -C tests/periph_i2c/helpyou should see a result, on master you won't and it will get locked up.
Issues/PRs references
fixes #10614
discussed in #10608