-style(9) nits MFC Log: Fix long standing race condition associated with how lockf uses open(2) for mutual exclusion: A brief description of the problem: 1) Proc A picks up non-blocking lock on file X 2) Proc B attempts to pickup lock, fails then waits 3) Proc C attempts to pickup lock, fails then waits 4) Proc A releases lock 5) Proc B acquires lock, release it to pickup a non-blocking version 6) Proc C acquires lock, release it to pickup a non-blocking version 7) Both process B and C race each other to pickup lock again This occurs mainly because the processes do not keep the lock after they have been waiting on it. They drop it, attempt to re-acquire it. (They use the wait to notify when the lock has become available then race to pick it up). This results in additional CPU utilization during the race, and can also result in processes picking locks up out of order. This change attempts to correct this problem by eliminating the test/acquire race and having the operating system handle it.
189 lines
4.5 KiB
C
189 lines
4.5 KiB
C
/*
|
|
* Copyright (C) 1997 John D. Polstra. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY JOHN D. POLSTRA AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL JOHN D. POLSTRA OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
#include <sys/cdefs.h>
|
|
__FBSDID("$FreeBSD$");
|
|
|
|
#include <sys/types.h>
|
|
#include <sys/wait.h>
|
|
|
|
#include <err.h>
|
|
#include <errno.h>
|
|
#include <fcntl.h>
|
|
#include <signal.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <sysexits.h>
|
|
#include <unistd.h>
|
|
|
|
static void cleanup(void);
|
|
static void killed(int sig);
|
|
static void timeout(int sig);
|
|
static void usage(void);
|
|
static int wait_for_lock(const char *name, int flags);
|
|
|
|
static const char *lockname;
|
|
static int lockfd = -1;
|
|
static int keep;
|
|
static volatile sig_atomic_t timed_out;
|
|
|
|
/*
|
|
* Execute an arbitrary command while holding a file lock.
|
|
*/
|
|
int
|
|
main(int argc, char **argv)
|
|
{
|
|
int ch, silent, status, waitsec;
|
|
pid_t child;
|
|
|
|
silent = keep = 0;
|
|
waitsec = -1; /* Infinite. */
|
|
while ((ch = getopt(argc, argv, "skt:")) != -1) {
|
|
switch (ch) {
|
|
case 'k':
|
|
keep = 1;
|
|
break;
|
|
case 's':
|
|
silent = 1;
|
|
break;
|
|
case 't':
|
|
{
|
|
char *endptr;
|
|
waitsec = strtol(optarg, &endptr, 0);
|
|
if (*optarg == '\0' || *endptr != '\0' || waitsec < 0)
|
|
errx(EX_USAGE,
|
|
"invalid timeout \"%s\"", optarg);
|
|
}
|
|
break;
|
|
default:
|
|
usage();
|
|
}
|
|
}
|
|
if (argc - optind < 2)
|
|
usage();
|
|
lockname = argv[optind++];
|
|
argc -= optind;
|
|
argv += optind;
|
|
if (waitsec > 0) { /* Set up a timeout. */
|
|
struct sigaction act;
|
|
|
|
act.sa_handler = timeout;
|
|
sigemptyset(&act.sa_mask);
|
|
act.sa_flags = 0; /* Note that we do not set SA_RESTART. */
|
|
sigaction(SIGALRM, &act, NULL);
|
|
alarm(waitsec);
|
|
}
|
|
lockfd = wait_for_lock(lockname, O_NONBLOCK);
|
|
while (lockfd == -1 && !timed_out && waitsec != 0)
|
|
lockfd = wait_for_lock(lockname, 0);
|
|
if (waitsec > 0)
|
|
alarm(0);
|
|
if (lockfd == -1) { /* We failed to acquire the lock. */
|
|
if (silent)
|
|
exit(EX_TEMPFAIL);
|
|
errx(EX_TEMPFAIL, "%s: already locked", lockname);
|
|
}
|
|
/* At this point, we own the lock. */
|
|
if (atexit(cleanup) == -1)
|
|
err(EX_OSERR, "atexit failed");
|
|
if ((child = fork()) == -1)
|
|
err(EX_OSERR, "cannot fork");
|
|
if (child == 0) { /* The child process. */
|
|
close(lockfd);
|
|
execvp(argv[0], argv);
|
|
warn("%s", argv[0]);
|
|
_exit(1);
|
|
}
|
|
/* This is the parent process. */
|
|
signal(SIGINT, SIG_IGN);
|
|
signal(SIGQUIT, SIG_IGN);
|
|
signal(SIGTERM, killed);
|
|
if (waitpid(child, &status, 0) == -1)
|
|
err(EX_OSERR, "waitpid failed");
|
|
return (WIFEXITED(status) ? WEXITSTATUS(status) : 1);
|
|
}
|
|
|
|
/*
|
|
* Remove the lock file.
|
|
*/
|
|
static void
|
|
cleanup(void)
|
|
{
|
|
|
|
if (keep)
|
|
flock(lockfd, LOCK_UN);
|
|
else
|
|
unlink(lockname);
|
|
}
|
|
|
|
/*
|
|
* Signal handler for SIGTERM. Cleans up the lock file, then re-raises
|
|
* the signal.
|
|
*/
|
|
static void
|
|
killed(int sig)
|
|
{
|
|
|
|
cleanup();
|
|
signal(sig, SIG_DFL);
|
|
if (kill(getpid(), sig) == -1)
|
|
err(EX_OSERR, "kill failed");
|
|
}
|
|
|
|
/*
|
|
* Signal handler for SIGALRM.
|
|
*/
|
|
static void
|
|
timeout(int sig __unused)
|
|
{
|
|
|
|
timed_out = 1;
|
|
}
|
|
|
|
static void
|
|
usage(void)
|
|
{
|
|
|
|
fprintf(stderr,
|
|
"usage: lockf [-ks] [-t seconds] file command [arguments]\n");
|
|
exit(EX_USAGE);
|
|
}
|
|
|
|
/*
|
|
* Wait until it might be possible to acquire a lock on the given file.
|
|
*/
|
|
static int
|
|
wait_for_lock(const char *name, int flags)
|
|
{
|
|
int fd;
|
|
|
|
if ((fd = open(name, O_CREAT|O_RDONLY|O_EXLOCK|flags, 0666)) == -1) {
|
|
if (errno == EINTR || errno == EAGAIN)
|
|
return (-1);
|
|
err(EX_CANTCREAT, "cannot open %s", name);
|
|
}
|
|
return (fd);
|
|
}
|