shifathosn
/
AnyPS5
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(libSceHttp2): clear completion queues for cascade-deleted requests 

sceHttp2DeleteRequest erased the request's completion queue, but
sceHttp2DeleteTemplate and sceHttp2Term removed descendant request
handles through ReleaseOwnedHandles without clearing their completion
queues. A request that completed asynchronously before its template or
context was deleted kept a stale completion that sceHttp2WaitAsync could
still consume.

ReleaseOwnedHandles now returns every transitively removed handle id, and
DeleteTemplate and Term erase the completion queue of each removed
request. CompleteAsync validates that the request is live while holding
the handle lock and inserts the completion under it, so a send that races
a deletion either returns the invalid-id error without queuing or is
erased by the deletion; a completion is no longer re-created after a
deletion returns. The only lock nesting stays handles before completions,
and no mutex is held while the user event is triggered.

GuestHttp2 covers a queued completion before sceHttp2DeleteTemplate and
before sceHttp2Term: the completion is no longer consumable, a late send
returns the invalid-id error without queuing, and the removed handles are
rejected.
This commit is contained in:
Tharun Balaji 2026-10-11 20:22:04 +05:30 committed by Adrià Franch
parent 4337b43f54
commit c426143712
2 changed files with 101 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

69
core/libs/prx/libSceHttp2/Export.cpp
View File

@ -39,15 +39,19 @@ static Http2Handle* FindAnyHandle(int id) {
return entry != g_handles.end() ? &entry->second : nullptr;
}
static void ReleaseOwnedHandles(int owner) {
static std::vector<int> ReleaseOwnedHandles(int owner) {
std::vector<int> owned;
for (const auto& entry : g_handles) {
if (entry.second.owner == owner) owned.push_back(entry.first);
}
std::vector<int> removed;
for (const int id : owned) {
ReleaseOwnedHandles(id);
const std::vector<int> descendants = ReleaseOwnedHandles(id);
removed.insert(removed.end(), descendants.begin(), descendants.end());
g_handles.erase(id);
removed.push_back(id);
}
return removed;
}
static bool HandleIsLive(int id) {
@ -65,21 +69,36 @@ struct Http2MemoryPoolStats {
static std::mutex g_completionsMutex;
static std::unordered_map<int, std::deque<Http2AsyncResult>> g_completions;
static void CompleteAsync(const char* function, int req_id, const Http2AsyncOption* kqueue_option, const void* option) {
static void EraseCompletions(const std::vector<int>& ids) {
std::lock_guard lock(g_completionsMutex);
for (const int id : ids) g_completions.erase(id);
}
static int CompleteAsync(const char* function, int req_id, const Http2AsyncOption* kqueue_option, const void* option) {
if (kqueue_option == nullptr) NotImplemented_nid_no_patch(function);
if (option != nullptr) NotImplemented_nid_no_patch(function);
bool queued = false;
{
std::lock_guard lock(g_completionsMutex);
Http2AsyncResult completion{};
completion.req_id = req_id;
completion.result = ERROR_NETWORK;
g_completions[req_id].push_back(completion);
std::lock_guard handlesLock(g_handlesMutex);
if (FindHandle(req_id, Http2Kind::Request) != nullptr) {
std::lock_guard completionsLock(g_completionsMutex);
Http2AsyncResult completion{};
completion.req_id = req_id;
completion.result = ERROR_NETWORK;
g_completions[req_id].push_back(completion);
queued = true;
}
}
if (!queued) return ERROR_INVALID_ID;
if (EqueueTriggerEvent_nid_postfix(kqueue_option->equeue, static_cast<uintptr_t>(kqueue_option->user_event_id), EVFILT_USER, kqueue_option->user_data) != 0) {
std::lock_guard lock(g_completionsMutex);
g_completions[req_id].pop_back();
{
std::lock_guard lock(g_completionsMutex);
const auto pending = g_completions.find(req_id);
if (pending != g_completions.end() && !pending->second.empty()) pending->second.pop_back();
}
NotImplemented_nid_no_patch(function);
}
return 0;
}
extern "C" {
@ -120,16 +139,19 @@ int APS5_VABI sceHttp2DeleteRequest(int req_id) {
if (FindHandle(req_id, Http2Kind::Request) == nullptr) return ERROR_INVALID_ID;
g_handles.erase(req_id);
}
std::lock_guard lock(g_completionsMutex);
g_completions.erase(req_id);
EraseCompletions({req_id});
return 0;
}
int APS5_VABI sceHttp2DeleteTemplate(int tmpl_id) {
std::lock_guard lock(g_handlesMutex);
if (FindHandle(tmpl_id, Http2Kind::Template) == nullptr) return ERROR_INVALID_ID;
ReleaseOwnedHandles(tmpl_id);
g_handles.erase(tmpl_id);
std::vector<int> removed;
{
std::lock_guard lock(g_handlesMutex);
if (FindHandle(tmpl_id, Http2Kind::Template) == nullptr) return ERROR_INVALID_ID;
removed = ReleaseOwnedHandles(tmpl_id);
g_handles.erase(tmpl_id);
}
EraseCompletions(removed);
return 0;
}
@ -189,8 +211,7 @@ int APS5_VABI sceHttp2SendRequest(int req_id, const void* post_data, size_t size
int APS5_VABI sceHttp2SendRequestAsync(int req_id, const void* post_data, size_t size, Http2AsyncOption* kqueue_option, void* option) {
(void)post_data;
(void)size;
CompleteAsync(__func__, req_id, kqueue_option, option);
return 0;
return CompleteAsync(__func__, req_id, kqueue_option, option);
}
int APS5_VABI sceHttp2SetAuthEnabled(int id, int is_enable) {
@ -283,10 +304,14 @@ int APS5_VABI sceHttp2SetMinSslVersion(int id, uint32_t ssl_version) {
}
int APS5_VABI sceHttp2Term(int lib_http2_ctx_id) {
std::lock_guard lock(g_handlesMutex);
if (FindHandle(lib_http2_ctx_id, Http2Kind::Context) == nullptr) return ERROR_INVALID_ID;
ReleaseOwnedHandles(lib_http2_ctx_id);
g_handles.erase(lib_http2_ctx_id);
std::vector<int> removed;
{
std::lock_guard lock(g_handlesMutex);
if (FindHandle(lib_http2_ctx_id, Http2Kind::Context) == nullptr) return ERROR_INVALID_ID;
removed = ReleaseOwnedHandles(lib_http2_ctx_id);
g_handles.erase(lib_http2_ctx_id);
}
EraseCompletions(removed);
return 0;
}

54
core/libs/tests/GuestHttp2.cpp
View File

@ -154,4 +154,58 @@ int main() {
Require(sceHttp2DeleteRequest(request) == 0);
Require(sceKernelDeleteEqueue(eq) == 0);
Require(sceHttp2Term(context) == 0);
KernelEqueue templateEqueue = 0;
Require(sceKernelCreateEqueue(&templateEqueue, "http2-template") == 0);
const int cascadeContext = sceHttp2Init(1, 1, 0x3000, 4);
Require(cascadeContext > 0);
const int cascadeTemplate = sceHttp2CreateTemplate(cascadeContext, "agent", 2, 0);
Require(cascadeTemplate > 0);
const int cascadeRequest = sceHttp2CreateRequestWithURL(cascadeTemplate, "GET", "https://example.com/cascade", 0);
Require(cascadeRequest > 0);
Require(sceKernelAddUserEventEdge(templateEqueue, cascadeRequest) == 0);
Http2AsyncOption cascadeOption{};
cascadeOption.equeue = templateEqueue;
cascadeOption.user_event_id = cascadeRequest;
cascadeOption.user_data = &tag;
Require(sceHttp2SendRequestAsync(cascadeRequest, nullptr, 0, &cascadeOption, nullptr) == 0);
KernelEvent cascadeEvent{};
int cascadeCount = 0;
Require(sceKernelWaitEqueue(templateEqueue, &cascadeEvent, 1, &cascadeCount, &timeout) == 0 && cascadeCount == 1);
Require(sceHttp2DeleteTemplate(cascadeTemplate) == 0);
Require(Throws([&] { sceHttp2WaitAsync(cascadeRequest, &result, nullptr, nullptr); }));
Require(sceHttp2SendRequestAsync(cascadeRequest, nullptr, 0, &cascadeOption, nullptr) == InvalidId);
Require(Throws([&] { sceHttp2WaitAsync(cascadeRequest, &result, nullptr, nullptr); }));
Require(sceHttp2DeleteRequest(cascadeRequest) == InvalidId);
RequireSslSetters(cascadeRequest, InvalidId);
Require(sceHttp2Term(cascadeContext) == 0);
Require(sceKernelDeleteUserEvent(templateEqueue, cascadeRequest) == 0);
Require(sceKernelDeleteEqueue(templateEqueue) == 0);
KernelEqueue termEqueue = 0;
Require(sceKernelCreateEqueue(&termEqueue, "http2-term") == 0);
const int terminatedContext = sceHttp2Init(1, 1, 0x4000, 4);
Require(terminatedContext > 0);
const int terminatedTemplate = sceHttp2CreateTemplate(terminatedContext, "agent", 2, 0);
Require(terminatedTemplate > 0);
const int terminatedRequest = sceHttp2CreateRequestWithURL(terminatedTemplate, "GET", "https://example.com/terminated", 0);
Require(terminatedRequest > 0);
Require(sceKernelAddUserEventEdge(termEqueue, terminatedRequest) == 0);
Http2AsyncOption termOption{};
termOption.equeue = termEqueue;
termOption.user_event_id = terminatedRequest;
termOption.user_data = &tag;
Require(sceHttp2SendRequestAsync(terminatedRequest, nullptr, 0, &termOption, nullptr) == 0);
KernelEvent termEvent{};
int termCount = 0;
Require(sceKernelWaitEqueue(termEqueue, &termEvent, 1, &termCount, &timeout) == 0 && termCount == 1);
Require(sceHttp2Term(terminatedContext) == 0);
Require(sceHttp2SendRequestAsync(terminatedRequest, nullptr, 0, &termOption, nullptr) == InvalidId);
Require(Throws([&] { sceHttp2WaitAsync(terminatedRequest, &result, nullptr, nullptr); }));
Require(sceHttp2DeleteRequest(terminatedRequest) == InvalidId);
Require(sceHttp2DeleteTemplate(terminatedTemplate) == InvalidId);
RequireSslSetters(terminatedContext, InvalidId);
RequireSslSetters(terminatedRequest, InvalidId);
Require(sceKernelDeleteUserEvent(termEqueue, terminatedRequest) == 0);
Require(sceKernelDeleteEqueue(termEqueue) == 0);
}