Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

functools.cached_property incorrectly locks the entire descriptor on class instead of per-instance locking #87634

Open
ztane mannequin opened this issue Mar 11, 2021 · 12 comments
Labels
3.8 3.9 3.10 performance stdlib

Comments

@ztane
Copy link
Mannequin

@ztane ztane mannequin commented Mar 11, 2021

BPO 43468
Nosy @tim-one, @rhettinger, @ncoghlan, @pitrou, @carljm, @jab, @serhiy-storchaka, @ztane, @graingert, @youtux
PRs
  • #27609
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
    closed_at = None
    created_at = <Date 2021-03-11.06:37:47.884>
    labels = ['3.8', 'library', '3.9', '3.10', 'performance']
    title = 'functools.cached_property incorrectly locks the entire descriptor on class instead of per-instance locking'
    updated_at = <Date 2021-09-07.16:52:45.061>
    user = 'https://github.com/ztane'

    bugs.python.org fields:

    activity = <Date 2021-09-07.16:52:45.061>
    actor = 'pitrou'
    assignee = 'none'
    closed = False
    closed_date = None
    closer = None
    components = ['Library (Lib)']
    creation = <Date 2021-03-11.06:37:47.884>
    creator = 'ztane'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 43468
    keywords = ['patch']
    message_count = 11.0
    messages = ['388480', '388499', '388592', '398290', '398291', '398680', '398686', '398719', '398837', '398861', '401308']
    nosy_count = 11.0
    nosy_names = ['tim.peters', 'rhettinger', 'ncoghlan', 'pitrou', 'carljm', 'pydanny', 'jab', 'serhiy.storchaka', 'ztane', 'graingert', 'youtux']
    pr_nums = ['27609']
    priority = 'normal'
    resolution = None
    stage = 'patch review'
    status = 'open'
    superseder = None
    type = 'resource usage'
    url = 'https://bugs.python.org/issue43468'
    versions = ['Python 3.8', 'Python 3.9', 'Python 3.10']

    @ztane
    Copy link
    Mannequin Author

    @ztane ztane mannequin commented Mar 11, 2021

    The locking on functools.cached_property (

    class cached_property:
    ) as it was written is completely undesirable for I/O bound values, parallel processing. Instead of protecting the calculation of cached property to the same instance in two threads, it completely blocks parallel calculations of cached values to *distinct instances* of the same class.

    Here's the code of __get__ in cached_property:

        def __get__(self, instance, owner=None):
            if instance is None:
                return self
            if self.attrname is None:
                raise TypeError(
                    "Cannot use cached_property instance without calling __set_name__ on it.")
            try:
                cache = instance.__dict__
            except AttributeError:  # not all objects have __dict__ (e.g. class defines slots)
                msg = (
                    f"No '__dict__' attribute on {type(instance).__name__!r} "
                    f"instance to cache {self.attrname!r} property."
                )
                raise TypeError(msg) from None
            val = cache.get(self.attrname, _NOT_FOUND)
            if val is _NOT_FOUND:
                with self.lock:
                    # check if another thread filled cache while we awaited lock
                    val = cache.get(self.attrname, _NOT_FOUND)
                    if val is _NOT_FOUND:
                        val = self.func(instance)
                        try:
                            cache[self.attrname] = val
                        except TypeError:
                            msg = (
                                f"The '__dict__' attribute on {type(instance).__name__!r} instance "
                                f"does not support item assignment for caching {self.attrname!r} property."
                            )
                            raise TypeError(msg) from None
            return val

    I noticed this because I was recommending that Pyramid web framework deprecate its much simpler reify decorator in favour of using cached_property, and then noticed why it won't do.

    Here is the test case for cached_property:

    from functools import cached_property
    from threading import Thread
    from random import randint
    import time
    
    
    
    class Spam:
        @cached_property
        def ham(self):
            print(f'Calculating amount of ham in {self}')
            time.sleep(10)
            return randint(0, 100)
    
    
    def bacon():
        spam = Spam()
        print(f'The amount of ham in {spam} is {spam.ham}')
    
    
    start = time.time()
    threads = []
    for _ in range(3):
        t = Thread(target=bacon)
        threads.append(t)
        t.start()
    
    for t in threads:
        t.join()

    print(f'Total running time was {time.time() - start}')

    Calculating amount of ham in <main.Spam object at 0x7fa50bcaa220>
    The amount of ham in <main.Spam object at 0x7fa50bcaa220> is 97
    Calculating amount of ham in <main.Spam object at 0x7fa50bcaa4f0>
    The amount of ham in <main.Spam object at 0x7fa50bcaa4f0> is 8
    Calculating amount of ham in <main.Spam object at 0x7fa50bcaa7c0>
    The amount of ham in <main.Spam object at 0x7fa50bcaa7c0> is 53
    Total running time was 30.02147102355957

    The runtime is 30 seconds; for pyramid.decorator.reify the runtime would be 10 seconds:

    Calculating amount of ham in <main.Spam object at 0x7fc4d8272430>
    Calculating amount of ham in <main.Spam object at 0x7fc4d82726d0>
    Calculating amount of ham in <main.Spam object at 0x7fc4d8272970>
    The amount of ham in <main.Spam object at 0x7fc4d82726d0> is 94
    The amount of ham in <main.Spam object at 0x7fc4d8272970> is 29
    The amount of ham in <main.Spam object at 0x7fc4d8272430> is 93
    Total running time was 10.010624170303345

    reify in Pyramid is used heavily to add properties to incoming HTTP request objects - using functools.cached_property instead would mean that each independent request thread blocks others because most of them would always get the value for the same lazy property using the the same descriptor instance and locking the same lock.

    @ztane ztane mannequin added 3.8 3.9 3.10 stdlib performance labels Mar 11, 2021
    @ztane
    Copy link
    Mannequin Author

    @ztane ztane mannequin commented Mar 11, 2021

    Django was going to replace their cached_property by the standard library one https://code.djangoproject.com/ticket/30949

    @ztane
    Copy link
    Mannequin Author

    @ztane ztane mannequin commented Mar 13, 2021

    I've been giving thought to implementing the locking on the instance or per instance instead, and there are bad and worse ideas like inserting per (instance, descriptor) into the instance __dict__, guarded by the per-descriptor lock; using a per-descriptor WeakKeyDictionary to map the instance to locks (which would of course not work - is there any way to map unhashable instances weakly?)

    So far best ideas that I have heard from others or discovered myself are along the lines of "remove locking altogether" (breaks compatibility); "add thread_unsafe keyword argument" with documentation saying that this is what you want to use if you're actually running threads; "implement Java-style object monitors and synchronized methods in CPython and use those instead"; or "create yet another method".

    @ztane ztane mannequin changed the title functools.cached_property locking is plain wrong. functools.cached_property incorrectly locks the entire descriptor on class instead of per-instance locking Mar 17, 2021
    @ztane ztane mannequin changed the title functools.cached_property locking is plain wrong. functools.cached_property incorrectly locks the entire descriptor on class instead of per-instance locking Mar 17, 2021
    @graingert
    Copy link
    Mannequin

    @graingert graingert mannequin commented Jul 27, 2021

    how about deprecating the functools.cached_property?

    @graingert
    Copy link
    Mannequin

    @graingert graingert mannequin commented Jul 27, 2021

    using a per-descriptor WeakKeyDictionary to map the instance to locks (which would of course not work - is there any way to map unhashable instances weakly?)

    there's an issue for that too: https://bugs.python.org/issue44140

    @rhettinger
    Copy link
    Contributor

    @rhettinger rhettinger commented Aug 1, 2021

    Antti Haapala, I agree that this situation is catastrophic and that we need some way to avoid blocking parallel calculations of cached values for distinct instances of the same class.

    Here's an idea that might possibly work. Perhaps, hold one lock only briefly to atomically test and set a variable to track which instances are actively being updated.

    If another thread is performing the update, use a separate condition condition variable to wait for the update to complete.

    If no other thread is doing the update, we don't need to hold a lock while performing the I/O bound underlying function. And when we're done updating this specific instance, atomically update the set of instances being actively updated and notify threads waiting on the condition variable to wake-up.

    The key idea is to hold the lock only for variable updates (which are fast) rather than for the duration of the underlying function call (which is slow). Only when this specific instance is being updated do we use a separate lock (wrapped in a condition variable) to block until the slow function call is complete.

    The logic is hairy, so I've added Serhiy and Tim to the nosy list to help think it through.

    --- Untested sketch ---------------------------------

    class cached_property:
        def __init__(self, func):
            self.update_lock = RLock()
            self.instances_other_thread_is_updating = {}
            self.cv = Condition(RLock())
            ...
            
        def __get__(self, instance, owner=None):
            if instance is None:
                return self
            if self.attrname is None:
                raise TypeError(
                    "Cannot use cached_property instance without calling __set_name__ on it.")
            try:
                cache = instance.__dict__
            except AttributeError:  # not all objects have __dict__ (e.g. class defines slots)
                msg = (
                    f"No '__dict__' attribute on {type(instance).__name__!r} "
                    f"instance to cache {self.attrname!r} property."
                )
                raise TypeError(msg) from None
            
            val = cache.get(self.attrname, _NOT_FOUND)
            if val is not _NOT_FOUND:
                return val
            
            # Now we need to either call the function or wait for another thread to do it
            with self.update_lock:
                # Invariant: no more than one thread can report
                # that the instance is actively being updated
                other_thread_is_updating = instance in instance_being_updated
                if other_thread_is_updating:
                    instance_being_updated.add(instance)
    
            # ONLY if this is the EXACT instance being updated
            # will we block and wait for the computed result.
            # Other instances won't have to wait
            if other_thread_is_updating:
                with self.cv:
                    while instance in instance_being_updated:
                        self.cv.wait()
                    return cache[self.attrname]
    
            # Let this thread do the update in this thread
            val = self.func(instance)
            try:
                cache[self.attrname] = val
            except TypeError:
                msg = (
                    f"The '__dict__' attribute on {type(instance).__name__!r} instance "
                    f"does not support item assignment for caching {self.attrname!r} property."
                )
                raise TypeError(msg) from None
            with self.update_lock:
                instance_being_updated.discard(instance)
            self.cv.notify_all()
            return val   
            
            # XXX What to do about waiting threads when an exception occurs? 
            # We don't want them to hang.  Should they repeat the underlying
            # function call to get their own exception to propagate upwards?

    @serhiy-storchaka
    Copy link
    Member

    @serhiy-storchaka serhiy-storchaka commented Aug 1, 2021

    I think it was a mistake to use lock in cached_property at first place. In most cases there is nothing wrong in evaluating the cached value more than once. lru_cache() does not use a lock for calling the wrapped function, and it works well. The only lock in the Python implementation is for updating internal structure, it is released when the wrapped function is called. The C implementation uses the GIL for this purpose.

    It is hard to get rid of the execution lock once it was introduced, but I think we should do it. Maybe deprecate cached_property and add a new decorator without a lock. Perhaps add separate decorators for automatically locking method execution, different decorators for different type of locking (global, per-method, per-instance, per-instance-and-method).

    Java has the synchronized keyword which allows to add implicit lock to a method. As it turned out, it was a bad idea, and it is no longer used in the modern code.

    @rhettinger
    Copy link
    Contributor

    @rhettinger rhettinger commented Aug 1, 2021

    It is hard to get rid of the execution lock once
    it was introduced, but I think we should do it.

    It's likely some apps are relying on the locking feature.
    So if we can fix it, we should do prefer that over more
    disruptive changes.

    Addenda to my code sketch: It should use "(id(instance), instance)" rather than just "instance" as the key.

    @serhiy-storchaka
    Copy link
    Member

    @serhiy-storchaka serhiy-storchaka commented Aug 3, 2021

    It should use "(id(instance), instance)" rather than just "instance" as the key.

    It should use a dict with id(instance) as a key and instance as value. An instance can be non-hashable.

    @rhettinger
    Copy link
    Contributor

    @rhettinger rhettinger commented Aug 4, 2021

    Here's the latest effort:

    ---------------------------------------------------------------

        def __get__(self, instance, owner=None):
            if instance is None:
                return self
            if self.attrname is None:
                raise TypeError(
                    "Cannot use cached_property instance without calling __set_name__ on it.")
            try:
                cache = instance.__dict__
            except AttributeError:  # not all objects have __dict__ (e.g. class defines slots)
                msg = (
                    f"No '__dict__' attribute on {type(instance).__name__!r} "
                    f"instance to cache {self.attrname!r} property."
                )
                raise TypeError(msg) from None
    
            # Quickly and atomically determine which thread is reponsible
            # for doing the update, so other threads can wait for that
            # update to complete.  If the update is already done, don't
            # wait.  If the updating thread is reentrant, don't wait.
            key = id(self)
            this_thread = get_ident()
            with self.updater_lock:
                val = cache.get(self.attrname, _NOT_FOUND)
                if val is not _NOT_FOUND:
                    return val
                wait = self.updater.setdefault(key, this_thread) != this_thread
    
            # ONLY if this instance currently being updated, block and wait
            # for the computed result. Other instances won't have to wait.
            # If an exception occurred, stop waiting.
            if wait:
                with self.cv:
                    while cache.get(self.attrname, _NOT_FOUND) is _NOT_FOUND:
                        self.cv.wait()
                    val = cache[self.attrname]
                    if val is not _EXCEPTION_RAISED:
                        return val
        # Call the underlying function to compute the value.
        try:
            val = self.func(instance)
        except Exception:
            val = _EXCEPTION_RAISED
    
        # Attempt to store the value
        try:
            cache[self.attrname] = val
        except TypeError:
            # Note: we have no way to communicate this exception to
            # threads waiting on the condition variable.  However, the
            # inability to store an attribute is a programming problem
            # rather than a runtime problem -- this exception would
            # likely occur early in testing rather than being runtime
            # event triggered by specific data.
            msg = (
                f"The '__dict__' attribute on {type(instance).__name__!r} instance "
                f"does not support item assignment for caching {self.attrname!r} property."
            )
            raise TypeError(msg) from None
    
            # Now that the value is stored, threads waiting on the condition
            # variable can be awakened and the updater dictionary can be
            # cleaned up.
            with self.updater_lock:
                self.updater.pop(key, None)
                cache[self.attrname] = _EXCEPTION_RAISED
                self.cv.notify_all()
    
            if val is _EXCEPTION_RAISED:
                raise
            return val

    @pitrou
    Copy link
    Member

    @pitrou pitrou commented Sep 7, 2021

    In addition to _NOT_FOUND and _EXCEPTION_RAISED, you could have an additional sentinel value _CONCURRENTLY_COMPUTING. Then you don't need to maintain a separate self.updater mapping.

    @ezio-melotti ezio-melotti transferred this issue from another repository Apr 10, 2022
    @carljm
    Copy link
    Contributor

    @carljm carljm commented May 24, 2022

    Sorry everyone for the bad implementation here. The initial PR (based on the widely used implementations in e.g. Django and Pyramid) didn't have locking; I added locking during review at the request of some commenters in the original issue (based on the implementation in some other less-used third-party package), but I think (even apart from this issue) it was a mistake to add it in the first place.

    I agree with @serhiy-storchaka and https://mobile.twitter.com/kristjanvalur/status/1431027975298895883 that the locking is basically out-of-place here: Python data structures (e.g. dict) guarantee only (mostly via the GIL) that they won't get into invalid internal states and segfault the interpreter in the face of concurrency, they don't guarantee an absence of application-level data races. That's up to the application to determine and apply the locking that it needs at a higher level.

    I think the best of bad options here is to add either cached_property_no_lock (name to-be-bikeshedded) or a nolock=True keyword argument, and eventually deprecate and remove the locking behavior. I can put up a PR for this. Any preferences about new name vs kwarg?

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Labels
    3.8 3.9 3.10 performance stdlib
    Projects
    None yet
    Development

    No branches or pull requests

    4 participants