xref: /netbsd-src/sys/kern/sysv_sem.c (revision 1ca5c1b28139779176bd5c13ad7c5f25c0bcd5f8)
1 /*	$NetBSD: sysv_sem.c,v 1.42 2001/11/12 15:25:26 lukem Exp $	*/
2 
3 /*-
4  * Copyright (c) 1999 The NetBSD Foundation, Inc.
5  * All rights reserved.
6  *
7  * This code is derived from software contributed to The NetBSD Foundation
8  * by Jason R. Thorpe of the Numerical Aerospace Simulation Facility,
9  * NASA Ames Research Center.
10  *
11  * Redistribution and use in source and binary forms, with or without
12  * modification, are permitted provided that the following conditions
13  * are met:
14  * 1. Redistributions of source code must retain the above copyright
15  *    notice, this list of conditions and the following disclaimer.
16  * 2. Redistributions in binary form must reproduce the above copyright
17  *    notice, this list of conditions and the following disclaimer in the
18  *    documentation and/or other materials provided with the distribution.
19  * 3. All advertising materials mentioning features or use of this software
20  *    must display the following acknowledgement:
21  *	This product includes software developed by the NetBSD
22  *	Foundation, Inc. and its contributors.
23  * 4. Neither the name of The NetBSD Foundation nor the names of its
24  *    contributors may be used to endorse or promote products derived
25  *    from this software without specific prior written permission.
26  *
27  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
28  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
29  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
30  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
31  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
32  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
33  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
34  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
35  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
36  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
37  * POSSIBILITY OF SUCH DAMAGE.
38  */
39 
40 /*
41  * Implementation of SVID semaphores
42  *
43  * Author: Daniel Boulet
44  *
45  * This software is provided ``AS IS'' without any warranties of any kind.
46  */
47 
48 #include <sys/cdefs.h>
49 __KERNEL_RCSID(0, "$NetBSD: sysv_sem.c,v 1.42 2001/11/12 15:25:26 lukem Exp $");
50 
51 #define SYSVSEM
52 
53 #include <sys/param.h>
54 #include <sys/kernel.h>
55 #include <sys/sem.h>
56 #include <sys/sysctl.h>
57 #include <sys/mount.h>		/* XXX for <sys/syscallargs.h> */
58 #include <sys/syscallargs.h>
59 
60 int	semtot = 0;
61 struct	semid_ds *sema;		/* semaphore id pool */
62 struct	__sem *sem;		/* semaphore pool */
63 struct	sem_undo *semu_list;	/* list of active undo structures */
64 int	*semu;			/* undo structure pool */
65 
66 #ifdef SEM_DEBUG
67 #define SEM_PRINTF(a) printf a
68 #else
69 #define SEM_PRINTF(a)
70 #endif
71 
72 struct sem_undo *semu_alloc __P((struct proc *));
73 int semundo_adjust __P((struct proc *, struct sem_undo **, int, int, int));
74 void semundo_clear __P((int, int));
75 
76 /*
77  * XXXSMP Once we go MP, there needs to be a lock for the semaphore system.
78  * Until then, we're saved by being a non-preemptive kernel.
79  */
80 
81 void
82 seminit()
83 {
84 	int i;
85 
86 	if (sema == NULL)
87 		panic("sema is NULL");
88 	if (semu == NULL)
89 		panic("semu is NULL");
90 
91 	for (i = 0; i < seminfo.semmni; i++) {
92 		sema[i]._sem_base = 0;
93 		sema[i].sem_perm.mode = 0;
94 	}
95 	for (i = 0; i < seminfo.semmnu; i++) {
96 		struct sem_undo *suptr = SEMU(i);
97 		suptr->un_proc = NULL;
98 	}
99 	semu_list = NULL;
100 }
101 
102 /*
103  * Placebo.
104  */
105 
106 int
107 sys_semconfig(p, v, retval)
108 	struct proc *p;
109 	void *v;
110 	register_t *retval;
111 {
112 	*retval = 0;
113 	return 0;
114 }
115 
116 /*
117  * Allocate a new sem_undo structure for a process
118  * (returns ptr to structure or NULL if no more room)
119  */
120 
121 struct sem_undo *
122 semu_alloc(p)
123 	struct proc *p;
124 {
125 	int i;
126 	struct sem_undo *suptr;
127 	struct sem_undo **supptr;
128 	int attempt;
129 
130 	/*
131 	 * Try twice to allocate something.
132 	 * (we'll purge any empty structures after the first pass so
133 	 * two passes are always enough)
134 	 */
135 
136 	for (attempt = 0; attempt < 2; attempt++) {
137 		/*
138 		 * Look for a free structure.
139 		 * Fill it in and return it if we find one.
140 		 */
141 
142 		for (i = 0; i < seminfo.semmnu; i++) {
143 			suptr = SEMU(i);
144 			if (suptr->un_proc == NULL) {
145 				suptr->un_next = semu_list;
146 				semu_list = suptr;
147 				suptr->un_cnt = 0;
148 				suptr->un_proc = p;
149 				return(suptr);
150 			}
151 		}
152 
153 		/*
154 		 * We didn't find a free one, if this is the first attempt
155 		 * then try to free some structures.
156 		 */
157 
158 		if (attempt == 0) {
159 			/* All the structures are in use - try to free some */
160 			int did_something = 0;
161 
162 			supptr = &semu_list;
163 			while ((suptr = *supptr) != NULL) {
164 				if (suptr->un_cnt == 0)  {
165 					suptr->un_proc = NULL;
166 					*supptr = suptr->un_next;
167 					did_something = 1;
168 				} else
169 					supptr = &(suptr->un_next);
170 			}
171 
172 			/* If we didn't free anything then just give-up */
173 			if (!did_something)
174 				return(NULL);
175 		} else {
176 			/*
177 			 * The second pass failed even though we freed
178 			 * something after the first pass!
179 			 * This is IMPOSSIBLE!
180 			 */
181 			panic("semu_alloc - second attempt failed");
182 		}
183 	}
184 	return NULL;
185 }
186 
187 /*
188  * Adjust a particular entry for a particular proc
189  */
190 
191 int
192 semundo_adjust(p, supptr, semid, semnum, adjval)
193 	struct proc *p;
194 	struct sem_undo **supptr;
195 	int semid, semnum;
196 	int adjval;
197 {
198 	struct sem_undo *suptr;
199 	struct undo *sunptr;
200 	int i;
201 
202 	/* Look for and remember the sem_undo if the caller doesn't provide
203 	   it */
204 
205 	suptr = *supptr;
206 	if (suptr == NULL) {
207 		for (suptr = semu_list; suptr != NULL; suptr = suptr->un_next) {
208 			if (suptr->un_proc == p) {
209 				*supptr = suptr;
210 				break;
211 			}
212 		}
213 		if (suptr == NULL) {
214 			if (adjval == 0)
215 				return(0);
216 			suptr = semu_alloc(p);
217 			if (suptr == NULL)
218 				return(ENOSPC);
219 			*supptr = suptr;
220 		}
221 	}
222 
223 	/*
224 	 * Look for the requested entry and adjust it (delete if adjval becomes
225 	 * 0).
226 	 */
227 	sunptr = &suptr->un_ent[0];
228 	for (i = 0; i < suptr->un_cnt; i++, sunptr++) {
229 		if (sunptr->un_id != semid || sunptr->un_num != semnum)
230 			continue;
231 		if (adjval == 0)
232 			sunptr->un_adjval = 0;
233 		else
234 			sunptr->un_adjval += adjval;
235 		if (sunptr->un_adjval == 0) {
236 			suptr->un_cnt--;
237 			if (i < suptr->un_cnt)
238 				suptr->un_ent[i] =
239 				    suptr->un_ent[suptr->un_cnt];
240 		}
241 		return(0);
242 	}
243 
244 	/* Didn't find the right entry - create it */
245 	if (adjval == 0)
246 		return(0);
247 	if (suptr->un_cnt == SEMUME)
248 		return(EINVAL);
249 
250 	sunptr = &suptr->un_ent[suptr->un_cnt];
251 	suptr->un_cnt++;
252 	sunptr->un_adjval = adjval;
253 	sunptr->un_id = semid;
254 	sunptr->un_num = semnum;
255 	return(0);
256 }
257 
258 void
259 semundo_clear(semid, semnum)
260 	int semid, semnum;
261 {
262 	struct sem_undo *suptr;
263 
264 	for (suptr = semu_list; suptr != NULL; suptr = suptr->un_next) {
265 		struct undo *sunptr;
266 		int i;
267 
268 		sunptr = &suptr->un_ent[0];
269 		for (i = 0; i < suptr->un_cnt; i++, sunptr++) {
270 			if (sunptr->un_id == semid) {
271 				if (semnum == -1 || sunptr->un_num == semnum) {
272 					suptr->un_cnt--;
273 					if (i < suptr->un_cnt) {
274 						suptr->un_ent[i] =
275 						  suptr->un_ent[suptr->un_cnt];
276 						i--, sunptr--;
277 					}
278 				}
279 				if (semnum != -1)
280 					break;
281 			}
282 		}
283 	}
284 }
285 
286 int
287 sys_____semctl13(p, v, retval)
288 	struct proc *p;
289 	void *v;
290 	register_t *retval;
291 {
292 	struct sys_____semctl13_args /* {
293 		syscallarg(int) semid;
294 		syscallarg(int) semnum;
295 		syscallarg(int) cmd;
296 		syscallarg(union __semun *) arg;
297 	} */ *uap = v;
298 	struct semid_ds sembuf;
299 	int cmd, error;
300 	void *pass_arg;
301 	union __semun karg;
302 
303 	cmd = SCARG(uap, cmd);
304 
305 	switch (cmd) {
306 	case IPC_SET:
307 	case IPC_STAT:
308 		pass_arg = &sembuf;
309 		break;
310 
311 	case GETALL:
312 	case SETVAL:
313 	case SETALL:
314 		pass_arg = &karg;
315 		break;
316 	default:
317 		pass_arg = NULL;
318 		break;
319 	}
320 
321 	if (pass_arg) {
322 		error = copyin(SCARG(uap, arg), &karg, sizeof(karg));
323 		if (error)
324 			return error;
325 		if (cmd == IPC_SET) {
326 			error = copyin(karg.buf, &sembuf, sizeof(sembuf));
327 			if (error)
328 				return (error);
329 		}
330 	}
331 
332 	error = semctl1(p, SCARG(uap, semid), SCARG(uap, semnum), cmd,
333 	    pass_arg, retval);
334 
335 	if (error == 0 && cmd == IPC_STAT)
336 		error = copyout(&sembuf, karg.buf, sizeof(sembuf));
337 
338 	return (error);
339 }
340 
341 int
342 semctl1(p, semid, semnum, cmd, v, retval)
343 	struct proc *p;
344 	int semid, semnum, cmd;
345 	void *v;
346 	register_t *retval;
347 {
348 	struct ucred *cred = p->p_ucred;
349 	union __semun *arg = v;
350 	struct semid_ds *sembuf = v, *semaptr;
351 	int i, error, ix;
352 
353 	SEM_PRINTF(("call to semctl(%d, %d, %d, %p)\n",
354 	    semid, semnum, cmd, v));
355 
356 	ix = IPCID_TO_IX(semid);
357 	if (ix < 0 || ix >= seminfo.semmsl)
358 		return (EINVAL);
359 
360 	semaptr = &sema[ix];
361 	if ((semaptr->sem_perm.mode & SEM_ALLOC) == 0 ||
362 	    semaptr->sem_perm._seq != IPCID_TO_SEQ(semid))
363 		return (EINVAL);
364 
365 	switch (cmd) {
366 	case IPC_RMID:
367 		if ((error = ipcperm(cred, &semaptr->sem_perm, IPC_M)) != 0)
368 			return (error);
369 		semaptr->sem_perm.cuid = cred->cr_uid;
370 		semaptr->sem_perm.uid = cred->cr_uid;
371 		semtot -= semaptr->sem_nsems;
372 		for (i = semaptr->_sem_base - sem; i < semtot; i++)
373 			sem[i] = sem[i + semaptr->sem_nsems];
374 		for (i = 0; i < seminfo.semmni; i++) {
375 			if ((sema[i].sem_perm.mode & SEM_ALLOC) &&
376 			    sema[i]._sem_base > semaptr->_sem_base)
377 				sema[i]._sem_base -= semaptr->sem_nsems;
378 		}
379 		semaptr->sem_perm.mode = 0;
380 		semundo_clear(ix, -1);
381 		wakeup(semaptr);
382 		break;
383 
384 	case IPC_SET:
385 		if ((error = ipcperm(cred, &semaptr->sem_perm, IPC_M)))
386 			return (error);
387 		semaptr->sem_perm.uid = sembuf->sem_perm.uid;
388 		semaptr->sem_perm.gid = sembuf->sem_perm.gid;
389 		semaptr->sem_perm.mode = (semaptr->sem_perm.mode & ~0777) |
390 		    (sembuf->sem_perm.mode & 0777);
391 		semaptr->sem_ctime = time.tv_sec;
392 		break;
393 
394 	case IPC_STAT:
395 		if ((error = ipcperm(cred, &semaptr->sem_perm, IPC_R)))
396 			return (error);
397 		memcpy(sembuf, semaptr, sizeof(struct semid_ds));
398 		break;
399 
400 	case GETNCNT:
401 		if ((error = ipcperm(cred, &semaptr->sem_perm, IPC_R)))
402 			return (error);
403 		if (semnum < 0 || semnum >= semaptr->sem_nsems)
404 			return (EINVAL);
405 		*retval = semaptr->_sem_base[semnum].semncnt;
406 		break;
407 
408 	case GETPID:
409 		if ((error = ipcperm(cred, &semaptr->sem_perm, IPC_R)))
410 			return (error);
411 		if (semnum < 0 || semnum >= semaptr->sem_nsems)
412 			return (EINVAL);
413 		*retval = semaptr->_sem_base[semnum].sempid;
414 		break;
415 
416 	case GETVAL:
417 		if ((error = ipcperm(cred, &semaptr->sem_perm, IPC_R)))
418 			return (error);
419 		if (semnum < 0 || semnum >= semaptr->sem_nsems)
420 			return (EINVAL);
421 		*retval = semaptr->_sem_base[semnum].semval;
422 		break;
423 
424 	case GETALL:
425 		if ((error = ipcperm(cred, &semaptr->sem_perm, IPC_R)))
426 			return (error);
427 		for (i = 0; i < semaptr->sem_nsems; i++) {
428 			error = copyout(&semaptr->_sem_base[i].semval,
429 			    &arg->array[i], sizeof(arg->array[i]));
430 			if (error != 0)
431 				break;
432 		}
433 		break;
434 
435 	case GETZCNT:
436 		if ((error = ipcperm(cred, &semaptr->sem_perm, IPC_R)))
437 			return (error);
438 		if (semnum < 0 || semnum >= semaptr->sem_nsems)
439 			return (EINVAL);
440 		*retval = semaptr->_sem_base[semnum].semzcnt;
441 		break;
442 
443 	case SETVAL:
444 		if ((error = ipcperm(cred, &semaptr->sem_perm, IPC_W)))
445 			return (error);
446 		if (semnum < 0 || semnum >= semaptr->sem_nsems)
447 			return (EINVAL);
448 		semaptr->_sem_base[semnum].semval = arg->val;
449 		semundo_clear(ix, semnum);
450 		wakeup(semaptr);
451 		break;
452 
453 	case SETALL:
454 		if ((error = ipcperm(cred, &semaptr->sem_perm, IPC_W)))
455 			return (error);
456 		for (i = 0; i < semaptr->sem_nsems; i++) {
457 			error = copyin(&arg->array[i],
458 			    &semaptr->_sem_base[i].semval,
459 			    sizeof(arg->array[i]));
460 			if (error != 0)
461 				break;
462 		}
463 		semundo_clear(ix, -1);
464 		wakeup(semaptr);
465 		break;
466 
467 	default:
468 		return (EINVAL);
469 	}
470 
471 	return (error);
472 }
473 
474 int
475 sys_semget(p, v, retval)
476 	struct proc *p;
477 	void *v;
478 	register_t *retval;
479 {
480 	struct sys_semget_args /* {
481 		syscallarg(key_t) key;
482 		syscallarg(int) nsems;
483 		syscallarg(int) semflg;
484 	} */ *uap = v;
485 	int semid, eval;
486 	int key = SCARG(uap, key);
487 	int nsems = SCARG(uap, nsems);
488 	int semflg = SCARG(uap, semflg);
489 	struct ucred *cred = p->p_ucred;
490 
491 	SEM_PRINTF(("semget(0x%x, %d, 0%o)\n", key, nsems, semflg));
492 
493 	if (key != IPC_PRIVATE) {
494 		for (semid = 0; semid < seminfo.semmni; semid++) {
495 			if ((sema[semid].sem_perm.mode & SEM_ALLOC) &&
496 			    sema[semid].sem_perm._key == key)
497 				break;
498 		}
499 		if (semid < seminfo.semmni) {
500 			SEM_PRINTF(("found public key\n"));
501 			if ((eval = ipcperm(cred, &sema[semid].sem_perm,
502 			    semflg & 0700)))
503 				return(eval);
504 			if (nsems > 0 && sema[semid].sem_nsems < nsems) {
505 				SEM_PRINTF(("too small\n"));
506 				return(EINVAL);
507 			}
508 			if ((semflg & IPC_CREAT) && (semflg & IPC_EXCL)) {
509 				SEM_PRINTF(("not exclusive\n"));
510 				return(EEXIST);
511 			}
512 			goto found;
513 		}
514 	}
515 
516 	SEM_PRINTF(("need to allocate the semid_ds\n"));
517 	if (key == IPC_PRIVATE || (semflg & IPC_CREAT)) {
518 		if (nsems <= 0 || nsems > seminfo.semmsl) {
519 			SEM_PRINTF(("nsems out of range (0<%d<=%d)\n", nsems,
520 			    seminfo.semmsl));
521 			return(EINVAL);
522 		}
523 		if (nsems > seminfo.semmns - semtot) {
524 			SEM_PRINTF(("not enough semaphores left (need %d, got %d)\n",
525 			    nsems, seminfo.semmns - semtot));
526 			return(ENOSPC);
527 		}
528 		for (semid = 0; semid < seminfo.semmni; semid++) {
529 			if ((sema[semid].sem_perm.mode & SEM_ALLOC) == 0)
530 				break;
531 		}
532 		if (semid == seminfo.semmni) {
533 			SEM_PRINTF(("no more semid_ds's available\n"));
534 			return(ENOSPC);
535 		}
536 		SEM_PRINTF(("semid %d is available\n", semid));
537 		sema[semid].sem_perm._key = key;
538 		sema[semid].sem_perm.cuid = cred->cr_uid;
539 		sema[semid].sem_perm.uid = cred->cr_uid;
540 		sema[semid].sem_perm.cgid = cred->cr_gid;
541 		sema[semid].sem_perm.gid = cred->cr_gid;
542 		sema[semid].sem_perm.mode = (semflg & 0777) | SEM_ALLOC;
543 		sema[semid].sem_perm._seq =
544 		    (sema[semid].sem_perm._seq + 1) & 0x7fff;
545 		sema[semid].sem_nsems = nsems;
546 		sema[semid].sem_otime = 0;
547 		sema[semid].sem_ctime = time.tv_sec;
548 		sema[semid]._sem_base = &sem[semtot];
549 		semtot += nsems;
550 		memset(sema[semid]._sem_base, 0,
551 		    sizeof(sema[semid]._sem_base[0])*nsems);
552 		SEM_PRINTF(("sembase = %p, next = %p\n", sema[semid]._sem_base,
553 		    &sem[semtot]));
554 	} else {
555 		SEM_PRINTF(("didn't find it and wasn't asked to create it\n"));
556 		return(ENOENT);
557 	}
558 
559 found:
560 	*retval = IXSEQ_TO_IPCID(semid, sema[semid].sem_perm);
561 	return(0);
562 }
563 
564 int
565 sys_semop(p, v, retval)
566 	struct proc *p;
567 	void *v;
568 	register_t *retval;
569 {
570 	struct sys_semop_args /* {
571 		syscallarg(int) semid;
572 		syscallarg(struct sembuf *) sops;
573 		syscallarg(size_t) nsops;
574 	} */ *uap = v;
575 	int semid = SCARG(uap, semid);
576 	size_t nsops = SCARG(uap, nsops);
577 	struct sembuf sops[MAX_SOPS];
578 	struct semid_ds *semaptr;
579 	struct sembuf *sopptr = NULL;
580 	struct __sem *semptr = NULL;
581 	struct sem_undo *suptr = NULL;
582 	struct ucred *cred = p->p_ucred;
583 	int i, j, eval;
584 	int do_wakeup, do_undos;
585 
586 	SEM_PRINTF(("call to semop(%d, %p, %d)\n", semid, sops, nsops));
587 
588 	semid = IPCID_TO_IX(semid);	/* Convert back to zero origin */
589 
590 	if (semid < 0 || semid >= seminfo.semmsl)
591 		return(EINVAL);
592 
593 	semaptr = &sema[semid];
594 	if ((semaptr->sem_perm.mode & SEM_ALLOC) == 0 ||
595 	    semaptr->sem_perm._seq != IPCID_TO_SEQ(SCARG(uap, semid)))
596 		return(EINVAL);
597 
598 	if ((eval = ipcperm(cred, &semaptr->sem_perm, IPC_W))) {
599 		SEM_PRINTF(("eval = %d from ipaccess\n", eval));
600 		return(eval);
601 	}
602 
603 	if (nsops > MAX_SOPS) {
604 		SEM_PRINTF(("too many sops (max=%d, nsops=%d)\n", MAX_SOPS, nsops));
605 		return(E2BIG);
606 	}
607 
608 	if ((eval = copyin(SCARG(uap, sops), sops, nsops * sizeof(sops[0])))
609 	    != 0) {
610 		SEM_PRINTF(("eval = %d from copyin(%p, %p, %d)\n", eval,
611 		    SCARG(uap, sops), &sops, nsops * sizeof(sops[0])));
612 		return(eval);
613 	}
614 
615 	/*
616 	 * Loop trying to satisfy the vector of requests.
617 	 * If we reach a point where we must wait, any requests already
618 	 * performed are rolled back and we go to sleep until some other
619 	 * process wakes us up.  At this point, we start all over again.
620 	 *
621 	 * This ensures that from the perspective of other tasks, a set
622 	 * of requests is atomic (never partially satisfied).
623 	 */
624 	do_undos = 0;
625 
626 	for (;;) {
627 		do_wakeup = 0;
628 
629 		for (i = 0; i < nsops; i++) {
630 			sopptr = &sops[i];
631 
632 			if (sopptr->sem_num >= semaptr->sem_nsems)
633 				return(EFBIG);
634 
635 			semptr = &semaptr->_sem_base[sopptr->sem_num];
636 
637 			SEM_PRINTF(("semop:  semaptr=%x, sem_base=%x, semptr=%x, sem[%d]=%d : op=%d, flag=%s\n",
638 			    semaptr, semaptr->_sem_base, semptr,
639 			    sopptr->sem_num, semptr->semval, sopptr->sem_op,
640 			    (sopptr->sem_flg & IPC_NOWAIT) ? "nowait" : "wait"));
641 
642 			if (sopptr->sem_op < 0) {
643 				if ((int)(semptr->semval +
644 					  sopptr->sem_op) < 0) {
645 					SEM_PRINTF(("semop:  can't do it now\n"));
646 					break;
647 				} else {
648 					semptr->semval += sopptr->sem_op;
649 					if (semptr->semval == 0 &&
650 					    semptr->semzcnt > 0)
651 						do_wakeup = 1;
652 				}
653 				if (sopptr->sem_flg & SEM_UNDO)
654 					do_undos = 1;
655 			} else if (sopptr->sem_op == 0) {
656 				if (semptr->semval > 0) {
657 					SEM_PRINTF(("semop:  not zero now\n"));
658 					break;
659 				}
660 			} else {
661 				if (semptr->semncnt > 0)
662 					do_wakeup = 1;
663 				semptr->semval += sopptr->sem_op;
664 				if (sopptr->sem_flg & SEM_UNDO)
665 					do_undos = 1;
666 			}
667 		}
668 
669 		/*
670 		 * Did we get through the entire vector?
671 		 */
672 		if (i >= nsops)
673 			goto done;
674 
675 		/*
676 		 * No ... rollback anything that we've already done
677 		 */
678 		SEM_PRINTF(("semop:  rollback 0 through %d\n", i-1));
679 		for (j = 0; j < i; j++)
680 			semaptr->_sem_base[sops[j].sem_num].semval -=
681 			    sops[j].sem_op;
682 
683 		/*
684 		 * If the request that we couldn't satisfy has the
685 		 * NOWAIT flag set then return with EAGAIN.
686 		 */
687 		if (sopptr->sem_flg & IPC_NOWAIT)
688 			return(EAGAIN);
689 
690 		if (sopptr->sem_op == 0)
691 			semptr->semzcnt++;
692 		else
693 			semptr->semncnt++;
694 
695 		SEM_PRINTF(("semop:  good night!\n"));
696 		eval = tsleep((caddr_t)semaptr, (PZERO - 4) | PCATCH,
697 		    "semwait", 0);
698 		SEM_PRINTF(("semop:  good morning (eval=%d)!\n", eval));
699 
700 		suptr = NULL;	/* sem_undo may have been reallocated */
701 
702 		if (eval != 0)
703 			return(EINTR);
704 		SEM_PRINTF(("semop:  good morning!\n"));
705 
706 		/*
707 		 * Make sure that the semaphore still exists
708 		 */
709 		if ((semaptr->sem_perm.mode & SEM_ALLOC) == 0 ||
710 		    semaptr->sem_perm._seq != IPCID_TO_SEQ(SCARG(uap, semid))) {
711 			/* The man page says to return EIDRM. */
712 			/* Unfortunately, BSD doesn't define that code! */
713 #ifdef EIDRM
714 			return(EIDRM);
715 #else
716 			return(EINVAL);
717 #endif
718 		}
719 
720 		/*
721 		 * The semaphore is still alive.  Readjust the count of
722 		 * waiting processes.
723 		 */
724 		if (sopptr->sem_op == 0)
725 			semptr->semzcnt--;
726 		else
727 			semptr->semncnt--;
728 	}
729 
730 done:
731 	/*
732 	 * Process any SEM_UNDO requests.
733 	 */
734 	if (do_undos) {
735 		for (i = 0; i < nsops; i++) {
736 			/*
737 			 * We only need to deal with SEM_UNDO's for non-zero
738 			 * op's.
739 			 */
740 			int adjval;
741 
742 			if ((sops[i].sem_flg & SEM_UNDO) == 0)
743 				continue;
744 			adjval = sops[i].sem_op;
745 			if (adjval == 0)
746 				continue;
747 			eval = semundo_adjust(p, &suptr, semid,
748 			    sops[i].sem_num, -adjval);
749 			if (eval == 0)
750 				continue;
751 
752 			/*
753 			 * Oh-Oh!  We ran out of either sem_undo's or undo's.
754 			 * Rollback the adjustments to this point and then
755 			 * rollback the semaphore ups and down so we can return
756 			 * with an error with all structures restored.  We
757 			 * rollback the undo's in the exact reverse order that
758 			 * we applied them.  This guarantees that we won't run
759 			 * out of space as we roll things back out.
760 			 */
761 			for (j = i - 1; j >= 0; j--) {
762 				if ((sops[j].sem_flg & SEM_UNDO) == 0)
763 					continue;
764 				adjval = sops[j].sem_op;
765 				if (adjval == 0)
766 					continue;
767 				if (semundo_adjust(p, &suptr, semid,
768 				    sops[j].sem_num, adjval) != 0)
769 					panic("semop - can't undo undos");
770 			}
771 
772 			for (j = 0; j < nsops; j++)
773 				semaptr->_sem_base[sops[j].sem_num].semval -=
774 				    sops[j].sem_op;
775 
776 			SEM_PRINTF(("eval = %d from semundo_adjust\n", eval));
777 			return(eval);
778 		} /* loop through the sops */
779 	} /* if (do_undos) */
780 
781 	/* We're definitely done - set the sempid's */
782 	for (i = 0; i < nsops; i++) {
783 		sopptr = &sops[i];
784 		semptr = &semaptr->_sem_base[sopptr->sem_num];
785 		semptr->sempid = p->p_pid;
786 	}
787 
788 	/* Do a wakeup if any semaphore was up'd. */
789 	if (do_wakeup) {
790 		SEM_PRINTF(("semop:  doing wakeup\n"));
791 #ifdef SEM_WAKEUP
792 		sem_wakeup((caddr_t)semaptr);
793 #else
794 		wakeup((caddr_t)semaptr);
795 #endif
796 		SEM_PRINTF(("semop:  back from wakeup\n"));
797 	}
798 	SEM_PRINTF(("semop:  done\n"));
799 	*retval = 0;
800 	return(0);
801 }
802 
803 /*
804  * Go through the undo structures for this process and apply the adjustments to
805  * semaphores.
806  */
807 void
808 semexit(p)
809 	struct proc *p;
810 {
811 	struct sem_undo *suptr;
812 	struct sem_undo **supptr;
813 
814 	/*
815 	 * Go through the chain of undo vectors looking for one associated with
816 	 * this process.
817 	 */
818 
819 	for (supptr = &semu_list; (suptr = *supptr) != NULL;
820 	    supptr = &suptr->un_next) {
821 		if (suptr->un_proc == p)
822 			break;
823 	}
824 
825 	/*
826 	 * If there is no undo vector, skip to the end.
827 	 */
828 
829 	if (suptr == NULL)
830 		return;
831 
832 	/*
833 	 * We now have an undo vector for this process.
834 	 */
835 
836 	SEM_PRINTF(("proc @%p has undo structure with %d entries\n", p,
837 	    suptr->un_cnt));
838 
839 	/*
840 	 * If there are any active undo elements then process them.
841 	 */
842 	if (suptr->un_cnt > 0) {
843 		int ix;
844 
845 		for (ix = 0; ix < suptr->un_cnt; ix++) {
846 			int semid = suptr->un_ent[ix].un_id;
847 			int semnum = suptr->un_ent[ix].un_num;
848 			int adjval = suptr->un_ent[ix].un_adjval;
849 			struct semid_ds *semaptr;
850 
851 			semaptr = &sema[semid];
852 			if ((semaptr->sem_perm.mode & SEM_ALLOC) == 0)
853 				panic("semexit - semid not allocated");
854 			if (semnum >= semaptr->sem_nsems)
855 				panic("semexit - semnum out of range");
856 
857 			SEM_PRINTF(("semexit:  %p id=%d num=%d(adj=%d) ; sem=%d\n",
858 			    suptr->un_proc, suptr->un_ent[ix].un_id,
859 			    suptr->un_ent[ix].un_num,
860 			    suptr->un_ent[ix].un_adjval,
861 			    semaptr->_sem_base[semnum].semval));
862 
863 			if (adjval < 0 &&
864 			    semaptr->_sem_base[semnum].semval < -adjval)
865 				semaptr->_sem_base[semnum].semval = 0;
866 			else
867 				semaptr->_sem_base[semnum].semval += adjval;
868 
869 #ifdef SEM_WAKEUP
870 			sem_wakeup((caddr_t)semaptr);
871 #else
872 			wakeup((caddr_t)semaptr);
873 #endif
874 			SEM_PRINTF(("semexit:  back from wakeup\n"));
875 		}
876 	}
877 
878 	/*
879 	 * Deallocate the undo vector.
880 	 */
881 	SEM_PRINTF(("removing vector\n"));
882 	suptr->un_proc = NULL;
883 	*supptr = suptr->un_next;
884 }
885