Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add IDisposable interface to GCHandle #55596

Closed

Conversation

Sergio0694
Copy link
Contributor

Closes #54792

namespace System.Runtime.InteropServices
{
      public struct GCHandle
+        : IDisposable
      {
+        public void Dispose();
      }
}

@dotnet-issue-labeler
Copy link

Note regarding the new-api-needs-documentation label:

This serves as a reminder for when your PR is modifying a ref *.cs file and adding/modifying public APIs, to please make sure the API implementation in the src *.cs file is documented with triple slash comments, so the PR reviewers can sign off that change.

/// <inheritdoc/>
public void Dispose()
{
IntPtr handle = _handle;
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❔ Can we not Interlocked.Exchange here?

Suggested change
IntPtr handle = _handle;
IntPtr handle = Interlocked.Exchange(ref _handle, IntPtr.Zero);

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@stephentoub
Copy link
Member

The test failures here are real, e.g.

Assert failure(PID 20237 [0x00004f0d], Thread: 20252 [0x4f1c]): *(_UNCHECKED_OBJECTREF *)handle == NULL
    File: /__w/1/s/src/coreclr/gc/handletable.cpp Line: 298
    Image: /datadisks/disk1/work/B65009B3/p/dotnet

@Sergio0694
Copy link
Contributor Author

Sergio0694 commented Jul 14, 2021

That's unexpected 🤔
I've double checked all the changes here twice (and also asked @tannergooding to have a look for good measure) and it doesn't seem like any of the changes here are invalid on their own or should possibly break anything, unless some of the code was (perhaps accidentally) relying on Free being thread-safe, and therefore breaking now? Thoughts on this? Also if this actually turned out to be the case, what would you recommend doing here - just reverting that decision and making both Free and Dispose thread safe, or possibly fix that code relying on this (which would be much trickier to do though I'd expect)?

EDIT: pushed a test as per Tanner's suggestion, let's see if that was actually it 👀

@jkotas
Copy link
Member

jkotas commented Jul 14, 2021

If it is the case, it would be useful to find the code that depends on the thread safety guarantees of Free.

@stephentoub
Copy link
Member

I suspect it's not a thread-safety thing; if it were, I'd expect it to be more non-deterministic. I pulled down the PR and deterministically get a failure here on every run:

  Fatal error. Internal CLR error. (0x80131506)
     at System.Runtime.InteropServices.Marshal.GetTypedObjectForIUnknown(IntPtr, System.Type)
     at System.Runtime.InteropServices.Tests.GetTypedObjectForIUnknownTests+<>c__DisplayClass9_0.<GetTypedObjectForIUnknown_UncastableObject_ThrowsInvalidCastException>b__0()

I'll need to rebuild with a checked runtime, but presumably that internal error is related to the previously shown assert.

@stephentoub
Copy link
Member

000000D29A2F93C0 00007FFFCA561A4F coreclr!HndCreateHandle + 475 at D:\repos\runtime\src\coreclr\gc\handletable.cpp:298
000000D29A2F94A0 00007FFFCA5CCBA5 coreclr!GCHandleStore::CreateHandleOfType + 69 at D:\repos\runtime\src\coreclr\gc\gchandletable.cpp:32
000000D29A2F94D0 00007FFFC9F0A79F coreclr!CreateHandleCommon + 59 at D:\repos\runtime\src\coreclr\vm\gchandleutilities.h:71
000000D29A2F9500 00007FFFC9F0A748 coreclr!BaseDomain::CreateHandle + 104 at D:\repos\runtime\src\coreclr\vm\appdomain.hpp:1027
000000D29A2F9540 00007FFFCA040176 coreclr!ThreadExceptionState::SetThrowable + 722 at D:\repos\runtime\src\coreclr\vm\exstate.cpp:160
000000D29A2F96B0 00007FFFCA187238 coreclr!Thread::SafeSetThrowables + 416 at D:\repos\runtime\src\coreclr\vm\threads.cpp:4531
000000D29A2F9860 00007FFFCA54C405 coreclr!ExceptionTracker::GetOrCreateTracker + 3645 at D:\repos\runtime\src\coreclr\vm\exceptionhandling.cpp:3852
000000D29A2F9D60 00007FFFCA55438B coreclr!ProcessCLRException + 1067 at D:\repos\runtime\src\coreclr\vm\exceptionhandling.cpp:1001
000000D29A2FA100 00007FF87CF9217F ntdll!RtlpExecuteHandlerForException + 15
000000D29A2FA130 00007FF87CF41454 ntdll!RtlDispatchException + 580
000000D29A2FA840 00007FF87CF90CAE ntdll!KiUserExceptionDispatch + 46
000000D29A2FAFD0 00007FF87A664ED9 KERNELBASE!RaiseException + 105
000000D29A2FB0B0 00007FFFCA03647F coreclr!`RaiseTheExceptionInternalOnly'::`53'::__Body::Run + 579 at D:\repos\runtime\src\coreclr\vm\excep.cpp:2806
000000D29A2FB1B0 00007FFFCA032ED8 coreclr!RaiseTheExceptionInternalOnly + 1024 at D:\repos\runtime\src\coreclr\vm\excep.cpp:2808
000000D29A2FB320 00007FFFCA03DDCF coreclr!UnwindAndContinueRethrowHelperAfterCatch + 227 at D:\repos\runtime\src\coreclr\vm\excep.cpp:8152
000000D29A2FB3F0 00007FFFCA3163C2 coreclr!MarshalNative::GetComInterfaceForObjectNative + 1138 at D:\repos\runtime\src\coreclr\vm\marshalnative.cpp:764
000000D29A2FB508                  [HelperMethodFrame_2OBJ: 000000d29a2fb508] System.Private.CoreLib.dll!System.Runtime.InteropServices.Marshal.GetComInterfaceForObjectNative(System.Object, System.Type, Boolean)
000000D29A2FB650 00007fff6ca4a157 System.Private.CoreLib.dll!System.Runtime.InteropServices.Marshal.GetComInterfaceForObject(System.Object, System.Type, System.Runtime.InteropServices.CustomQueryInterfaceMode) + 231 [D:\repos\runtime\src\coreclr\System.Private.CoreLib\src\System\Runtime\InteropServices\Marshal.CoreCLR.cs @ 382]
000000D29A2FB658 000002B277FA5570 
000000D29A2FB660 00000000000000CD 
000000D29A2FB668 000002B278028F90 
000000D29A2FB670 00007FFFC9F41A6D coreclr!Thread::BeginForbidGC + 137 at D:\repos\runtime\src\coreclr\vm\threads.h:2075
000000D29A2FB6A0 0000000100000001 
000000D29A2FB6A8 000000D29A2FB6F0 
000000D29A2FB6B0 00007fff6ca579e9 System.Runtime.InteropServices.Tests.dll!System.Runtime.InteropServices.Tests.GetComInterfaceForObjectTests+c__DisplayClass12_0.<GetComInterfaceForObject_InvalidType_ThrowsArgumentException>b__1() + 89 [D:\repos\runtime\src\libraries\System.Runtime.InteropServices\tests\System\Runtime\InteropServices\Marshal\GetComInterfaceForObjectTests.cs @ 187]
000000D29A2FB6B8 000002B2006EF640 
000000D29A2FB6C0 000002B2000AF490 
000000D29A2FB6C8 000002B200000001 
000000D29A2FB6D0 00007FFFCA287363 coreclr!ForbidGC::~ForbidGC + 91 at D:\repos\runtime\src\coreclr\vm\fcall.cpp:189
000000D29A2FB700 00007fff6c9b7fd9 xunit.assert.dll!Xunit.Assert.RecordException(System.Func`1<System.Object>) + 89 [C:\Dev\xunit\xunit\src\xunit.assert\Asserts\Record.cs @ 50]
000000D29A2FB708 000002B2006EF308 
000000D29A2FB710 000002B2006EF600 
000000D29A2FB718 000002B278028F90 
000000D29A2FB770 00007fff6c9b7e43 xunit.assert.dll!Xunit.Assert.Throws[[System.__Canon, System.Private.CoreLib]](System.Func`1<System.Object>) + 83 [C:\Dev\xunit\xunit\src\xunit.assert\Asserts\ExceptionAsserts.cs @ 41]
000000D29A2FB7D0 00007fff6c9b7f16 TestUtilities.dll!System.AssertExtensions.Throws[[System.__Canon, System.Private.CoreLib]](System.String, System.Func`1<System.Object>) + 134 [D:\repos\runtime\src\libraries\Common\tests\TestUtilities\System\AssertExtensions.cs @ 121]
000000D29A2FB840 00007fff6ca57452 System.Runtime.InteropServices.Tests.dll!System.Runtime.InteropServices.Tests.GetComInterfaceForObjectTests.GetComInterfaceForObject_InvalidType_ThrowsArgumentException(System.Type) + 258 [D:\repos\runtime\src\libraries\System.Runtime.InteropServices\tests\System\Runtime\InteropServices\Marshal\GetComInterfaceForObjectTests.cs @ 187]

@stephentoub
Copy link
Member

stephentoub commented Jul 14, 2021

@jkotas, does the runtime take a dependency on the method table / layout of GCHandle? If I just comment out : IDisposable, the problems go away.

@jkotas
Copy link
Member

jkotas commented Jul 14, 2021

The runtime has no dependencies like that.

I think that the problem is going to be a code pattern like if (o is IDisposable d) d.Dispose();. This was no-op before this change, but starts disposing the GCHandle prematurely with this change.

@stephentoub
Copy link
Member

I think that the problem is going to be a code pattern like if (o is IDisposable d) d.Dispose();

I think you're right... tracking it down...

@stephentoub
Copy link
Member

stephentoub commented Jul 14, 2021

Heh, the problem is related to xunit theories. The xunit code adds every item yielded from a member data to this collection:

https://github.com/xunit/xunit/blob/a8614d34999c889e1c8014f679de95d20eae1304/src/xunit.execution/Sdk/Frameworks/Runners/XunitTheoryTestCaseRunner.cs#L100

and it then disposes of those:

https://github.com/xunit/xunit/blob/a8614d34999c889e1c8014f679de95d20eae1304/src/xunit.execution/Sdk/Frameworks/Runners/XunitTheoryTestCaseRunner.cs#L151-L152

and we have tests that do things like this:

public static IEnumerable<object[]> Equals_TestData()
{
GCHandle handle = GCHandle.Alloc(new object());
yield return new object[] { handle, handle, true };
yield return new object[] { GCHandle.Alloc(new object()), GCHandle.Alloc(new object()), false };
yield return new object[] { GCHandle.Alloc(new object()), new object(), false };
yield return new object[] { GCHandle.Alloc(new object()), null, false };

Makes me a little nervous about this change. Obviously we can change our tests to not do that, but I'm not sure where else this pattern might creep up and lead to silent corruption.

@AraHaan
Copy link
Member

AraHaan commented Jul 14, 2021

and it then disposes of those:
https://github.com/xunit/xunit/blob/a8614d34999c889e1c8014f679de95d20eae1304/src/xunit.execution/Sdk/Frameworks/Runners/XunitTheoryTestCaseRunner.cs#L151-L152

Cant the part where it disposes of them actually be patched to filter out GCHandles and dispose of them last (or not at all) as a patch to xunit itself?

@GrabYourPitchforks
Copy link
Member

@AraHaan It'd be easier to remove the finally block from our test methods, relying on xunit to dispose of them instead of us performing manual disposal. Localized change, no xunit patch needed.

But this doesn't address Steve's larger issue: "I'm not sure where else this pattern might creep up and lead to silent corruption."

@jkotas
Copy link
Member

jkotas commented Jul 15, 2021

Maybe we can add Dispose without implementing the IDisposable interface? It won't make it possible to use GCHandle via using pattern, but it will at least fix the IsAllocated / Free dance that a lot of places have to do today.

@AraHaan
Copy link
Member

AraHaan commented Jul 15, 2021

I think a better option is to create a new interface IDisposableHandle and use that for GCHandle and somehow hack the language to allow types implementing that interface to use "using"s with them.

@stephentoub
Copy link
Member

stephentoub commented Jul 16, 2021

This is not worth a new interface in my opinion. If it really rose to a high level of importance, we could teach the language how to pattern match Dispose, just as it already can for ref structs. I'm fine with adding Dispose here without the interface implementation. I'm waffling on whether we should add the interface implementation, anyway; the test pattern here seems very unique to a combination of test harnesses and tests only we'd write in runtime, and this xunit approach would likely have issues with any type becoming IDisposable... this one just has harder to diagnose side effects.

@terrajobst terrajobst added the community-contribution Indicates that the PR has been added by a community member label Jul 19, 2021
@GSPP
Copy link

GSPP commented Jul 25, 2021

image

xUnit auto-dispose will now mutate the boxed GCHandle instances on the heap through the IDisposable interface. That's a pretty extreme design.

@AaronRobinsonMSFT
Copy link
Member

I think we might want to go back to the drawing board here and reconsider the API given the discovered semantics we've found. @jkotas 's suggestion is one option:

Maybe we can add Dispose without implementing the IDisposable interface? It won't make it possible to use GCHandle via using pattern, but it will at least fix the IsAllocated / Free dance that a lot of places have to do today.

Or perhaps simply abandon this as too many patterns have been created over the years that make this troublesome to deal with. Similar to the SafeHandle fiasco – #48193.

@AaronRobinsonMSFT
Copy link
Member

@Sergio0694 Can we close this PR in lieu of the above discussion and concerns about compat? I think we need some additional thought on it.

@Sergio0694
Copy link
Contributor Author

@AaronRobinsonMSFT Sure thing! 😄

...I need to stop ever saying "this looks straightforward enough" when doing anything on the runtime 🤣

@Sergio0694 Sergio0694 closed this Nov 1, 2021
@AaronRobinsonMSFT
Copy link
Member

@Sergio0694 To be fair, lots of us thought it would be too. You are in good company.

@ghost ghost locked as resolved and limited conversation to collaborators Dec 1, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add Dispose/IDisposable to GCHandle
10 participants