Dekker's algorithm

Revision as of 18:25, 20 August 2024 by imported>Bobby Cohn (correcting link after RM)
(diff) ← Previous revision | Latest revision (diff) | Newer revision → (diff)

Template:Short description Dekker's algorithm is the first known correct solution to the mutual exclusion problem in concurrent programming where processes only communicate via shared memory. The solution is attributed to Dutch mathematician Th. J. Dekker by Edsger W. Dijkstra in an unpublished paper on sequential process descriptions<ref>Template:Cite EWD (undated, 1962 or 1963); English translation About the sequentiality of process descriptions</ref> and his manuscript on cooperating sequential processes.<ref>Template:Cite EWD (September 1965)</ref> It allows two threads to share a single-use resource without conflict, using only shared memory for communication.

It avoids the strict alternation of a naïve turn-taking algorithm, and was one of the first mutual exclusion algorithms to be invented.

OverviewEdit

If two processes attempt to enter a critical section at the same time, the algorithm will allow only one process in, based on whose Template:Mono it is. If one process is already in the critical section, the other process will busy wait for the first process to exit. This is done by the use of two flags, Template:Mono and Template:Mono, which indicate an intention to enter the critical section on the part of processes 0 and 1, respectively, and a variable Template:Mono that indicates who has priority between the two processes.

File:Dekker's Algorithm.svg
Dekker's algorithm

Dekker's algorithm can be expressed in pseudocode, as follows.<ref>Template:Cite journal</ref>

<syntaxhighlight lang="text">

   variables
       wants_to_enter : array of 2 booleans
       turn : integer
   wants_to_enter[0] ← false
   wants_to_enter[1] ← false
   turn ← 0   // or 1

</syntaxhighlight>

<syntaxhighlight lang="text"> p0:

  wants_to_enter[0] ← true
  while wants_to_enter[1] {
     if turn ≠ 0 {
        wants_to_enter[0] ← false
        while turn ≠ 0 {
          // busy wait
        }
        wants_to_enter[0] ← true
     }
  }
  // critical section
  ...
  turn ← 1
  wants_to_enter[0] ← false
  // remainder section

</syntaxhighlight>

<syntaxhighlight lang="text"> p1:

  wants_to_enter[1] ← true
  while wants_to_enter[0] {
     if turn ≠ 1 {
        wants_to_enter[1] ← false
        while turn ≠ 1 {
          // busy wait
        }
        wants_to_enter[1] ← true
     }
  }
  // critical section
  ...
  turn ← 0
  wants_to_enter[1] ← false
  // remainder section

</syntaxhighlight>

Processes indicate an intention to enter the critical section which is tested by the outer while loop. If the other process has not flagged intent, the critical section can be entered safely irrespective of the current turn. Mutual exclusion will still be guaranteed as neither process can become critical before setting their flag (implying at least one process will enter the while loop). This also guarantees progress as waiting will not occur on a process which has withdrawn intent to become critical. Alternatively, if the other process's variable was set, the while loop is entered and the turn variable will establish who is permitted to become critical. Processes without priority will withdraw their intention to enter the critical section until they are given priority again (the inner while loop). Processes with priority will break from the while loop and enter their critical section.

Dekker's algorithm guarantees mutual exclusion, freedom from deadlock, and freedom from starvation. Let us see why the last property holds. Suppose p0 is stuck inside the Template:Mono loop forever. There is freedom from deadlock, so eventually p1 will proceed to its critical section and set Template:Mono (and the value of turn will remain unchanged as long as p0 doesn't progress). Eventually p0 will break out of the inner Template:Mono loop (if it was ever stuck on it). After that it will set Template:Mono to true and settle down to waiting for Template:Mono to become false (since Template:Mono, it will never do the actions in the while loop). The next time p1 tries to enter its critical section, it will be forced to execute the actions in its Template:Mono loop. In particular, it will eventually set Template:Mono to false and get stuck in the Template:Mono loop (since turn remains 0). The next time control passes to p0, it will exit the Template:Mono loop and enter its critical section.

If the algorithm were modified by performing the actions in the Template:Mono loop without checking if Template:Mono, then there is a possibility of starvation. Thus all the steps in the algorithm are necessary.

NotesEdit

{{ safesubst:#invoke:Unsubst||date=__DATE__ |$B= {{ safesubst:#invoke:Unsubst||date=__DATE__ |$B= Template:Ambox }} }} One advantage of this algorithm is that it doesn't require special test-and-set (atomic read/modify/write) instructions and is therefore highly portable between languages and machine architectures. One disadvantage is that it is limited to two processes and makes use of busy waiting instead of process suspension. (The use of busy waiting suggests that processes should spend a minimum amount of time inside the critical section.)

Modern operating systems provide mutual exclusion primitives that are more general and flexible than Dekker's algorithm. However, in the absence of actual contention between the two processes, the entry and exit from critical section is extremely efficient when Dekker's algorithm is used.

Many modern CPUs execute their instructions in an out-of-order fashion; even memory accesses can be reordered (see memory ordering). This algorithm won't work on SMP machines equipped with these CPUs without the use of memory barriers.

Additionally, many optimizing compilers can perform transformations that will cause this algorithm to fail regardless of the platform. In many languages, it is legal for a compiler to detect that the flag variables Template:Mono and Template:Mono are never accessed in the loop. It can then remove the writes to those variables from the loop, using a process called loop-invariant code motion. It would also be possible for many compilers to detect that the turn variable is never modified by the inner loop, and perform a similar transformation, resulting in a potential infinite loop. If either of these transformations is performed, the algorithm will fail, regardless of architecture.

To alleviate this problem, volatile variables should be marked as modifiable outside the scope of the currently executing context. For example, in C, C++, C# or Java, one would annotate these variables as 'volatile'. Note however that the C/C++ "volatile" attribute only guarantees that the compiler generates code with the proper ordering; it does not include the necessary memory barriers to guarantee in-order execution of that code. C++11 atomic variables can be used to guarantee the appropriate ordering requirements — by default, operations on atomic variables are sequentially consistent so if the wants_to_enter and turn variables are atomic a naive implementation will "just work". Alternatively, ordering can be guaranteed by the explicit use of separate fences, with the load and store operations using a relaxed ordering.

See alsoEdit

ReferencesEdit

Template:Reflist

Template:Edsger Dijkstra