xref: /netbsd-src/sys/kern/sysv_sem.c (revision 448e711c7835101c94f75b7ebddf58046df58290)
1 /*
2  * Implementation of SVID semaphores
3  *
4  * Author:  Daniel Boulet
5  *
6  * This software is provided ``AS IS'' without any warranties of any kind.
7  */
8 
9 #ifdef SYSVSEM
10 
11 #include "param.h"
12 #include "systm.h"
13 #include "kernel.h"
14 #include "proc.h"
15 #include "sem.h"
16 #include "malloc.h"
17 
18 static int	semctl(), semget(), semop(), semconfig();
19 int	(*semcalls[])() = { semctl, semget, semop, semconfig };
20 int	semtot = 0;
21 
22 static struct proc *semlock_holder = NULL;
23 
24 int
25 seminit()
26 {
27     register int i;
28     vm_offset_t whocares1, whocares2;
29 
30     if ( sema == NULL ) {
31 	panic("sema is NULL");
32     }
33     for ( i = 0; i < seminfo.semmni; i += 1 ) {
34 	sema[i].sem_base = 0;
35 	sema[i].sem_perm.mode = 0;
36     }
37     if ( semu == NULL ) {
38 	panic("semu is NULL");
39     }
40     for ( i = 0; i < seminfo.semmnu; i += 1 ) {
41 	register struct sem_undo *suptr = SEMU(i);
42 	suptr->un_proc = NULL;
43     }
44     semu_list = NULL;
45 }
46 
47 /*
48  * Entry point for all SEM calls
49  */
50 
51 struct semsys_args {
52 	u_int	which;
53 };
54 
55 int
56 semsys(p, uap, retval)
57 	struct proc *p;
58 	struct semsys_args *uap;
59 	int *retval;
60 {
61 	while ( semlock_holder != NULL && semlock_holder != p ) {
62 	    /* printf("semaphore facility locked - sleeping ...\n"); */
63 	    sleep( (caddr_t)&semlock_holder, (PZERO - 4) );
64 	}
65 
66 	if (uap->which >= sizeof(semcalls)/sizeof(semcalls[0]))
67 		return (EINVAL);
68 	return ((*semcalls[uap->which])(p, &uap[1], retval));
69 }
70 
71 /*
72  * Lock or unlock the entire semaphore facility.
73  *
74  * This will probably eventually evolve into a general purpose semaphore
75  * facility status enquiry mechanism (I don't like the "read /dev/kmem"
76  * approach currently taken by ipcs and the amount of info that we want
77  * to be able to extract for ipcs is probably beyond what the capability
78  * of the getkerninfo facility.
79  *
80  * At the time that the current version of semconfig was written, ipcs is
81  * the only user of the semconfig facility.  It uses it to ensure that the
82  * semaphore facility data structures remain static while it fishes around
83  * in /dev/kmem.
84  */
85 
86 struct semconfig_args {
87 	semconfig_ctl_t	flag;
88 };
89 
90 int
91 semconfig(p, uap, retval)
92 	struct proc *p;
93 	struct semconfig_args *uap;
94 	int *retval;
95 {
96     int eval = 0;
97 
98     switch ( uap->flag ) {
99     case SEM_CONFIG_FREEZE:
100 	semlock_holder = p;
101 	break;
102     case SEM_CONFIG_THAW:
103 	semlock_holder = NULL;
104 	wakeup( (caddr_t)&semlock_holder );
105 	break;
106     default:
107 	printf("semconfig:  unknown flag parameter value (%d) - ignored\n",uap->flag);
108 	eval = EINVAL;
109 	break;
110     }
111 
112     *retval = 0;
113     return(eval);
114 }
115 
116 /*
117  * Allocate a new sem_undo structure for a process
118  * (returns ptr to structure or NULL if no more room)
119  */
120 
121 struct sem_undo *
122 semu_alloc(struct proc *p)
123 {
124     register int i;
125     register struct sem_undo *suptr;
126     register struct sem_undo **supptr;
127     int attempt;
128 
129     /*
130      * Try twice to allocate something.
131      * (we'll purge any empty structures after the first pass so
132      * two passes are always enough)
133      */
134 
135     for ( attempt = 0; attempt < 2; attempt += 1 ) {
136 
137 	/*
138 	 * Look for a free structure.
139 	 * Fill it in and return it if we find one.
140 	 */
141 
142 	for ( i = 0; i < seminfo.semmnu; i += 1 ) {
143 	    suptr = SEMU(i);
144 	    if ( suptr->un_proc == NULL ) {
145 		suptr->un_next = semu_list;
146 		semu_list = suptr;
147 		suptr->un_cnt = 0;
148 		suptr->un_proc = p;
149 		return(suptr);
150 	    }
151 	}
152 
153 	/*
154 	 * We didn't find a free one, if this is the first attempt
155 	 * then try to free some structures.
156 	 */
157 
158 	if ( attempt == 0 ) {
159 
160 	    /* All the structures are in use - try to free some */
161 
162 	    int did_something = 0;
163 
164 	    supptr = &semu_list;
165 	    while ( (suptr = *supptr) != NULL ) {
166 		if ( suptr->un_cnt == 0 )  {
167 		    suptr->un_proc = NULL;
168 		    *supptr = suptr->un_next;
169 		    did_something = 1;
170 		} else {
171 		    supptr = &(suptr->un_next);
172 		}
173 	    }
174 
175 	    /* If we didn't free anything then just give-up */
176 
177 	    if ( !did_something ) {
178 		return(NULL);
179 	    }
180 
181 	} else {
182 
183 	    /*
184 	     * The second pass failed even though we freed
185 	     * something after the first pass!
186 	     * This is IMPOSSIBLE!
187 	     */
188 
189 	    panic("semu_alloc - second attempt failed");
190 
191 	}
192 
193     }
194 
195 }
196 
197 /*
198  * Adjust a particular entry for a particular proc
199  */
200 
201 int
202 semundo_adjust(register struct proc *p,struct sem_undo **supptr,int semid,int semnum,int adjval)
203 {
204     register struct sem_undo *suptr;
205     register struct undo *sunptr;
206     int i;
207 
208     /* Look for and remember the sem_undo if the caller doesn't provide it */
209 
210     suptr = *supptr;
211     if ( suptr == NULL ) {
212 	/* printf("adjust:  need to find suptr\n"); */
213 	for ( suptr = semu_list; suptr != NULL; suptr = suptr->un_next ) {
214 	    if ( suptr->un_proc == p ) {
215 		/* printf("adjust:  found suptr @%08x\n",suptr); */
216 		*supptr = suptr;
217 		break;
218 	    }
219 	}
220 	if ( suptr == NULL ) {
221 	    if ( adjval == 0 ) {
222 		return(0);	/* Don't create it if it doesn't exist */
223 	    }
224 	    suptr = semu_alloc(p);
225 	    if ( suptr == NULL ) {
226 		return(ENOSPC);
227 	    }
228 	    /* printf("adjust:  allocated suptr @%08x\n",suptr); */
229 	    *supptr = suptr;
230 	}
231     }
232 
233     /* Look for the requested entry and adjust it (delete if adjval becomes 0) */
234 
235     sunptr = &(suptr->un_ent[0]);
236     for ( i = 0; i < suptr->un_cnt; i += 1, sunptr += 1 ) {
237 
238 	if ( sunptr->un_id == semid && sunptr->un_num == semnum ) {
239 
240 	    /* Found the right entry - adjust it */
241 
242 	    if ( adjval == 0 ) {
243 		sunptr->un_adjval = 0;
244 	    } else {
245 		/* printf("adjust:  %08x %d:%d(%d) += %d\n",suptr->un_proc,semid,semnum,sunptr->un_adjval,adjval); */
246 		sunptr->un_adjval += adjval;
247 	    }
248 	    if ( sunptr->un_adjval == 0 ) {
249 		/* printf("adjust:  %08x deleting entry %d:%d\n",suptr->un_proc,semid,semnum); */
250 		suptr->un_cnt -= 1;
251 		if ( i < suptr->un_cnt ) {
252 		    suptr->un_ent[i] = suptr->un_ent[suptr->un_cnt];
253 		}
254 	    }
255 	    return(0);
256 
257 	}
258     }
259 
260     /* Didn't find the right entry - create it */
261 
262     if ( adjval == 0 ) {
263 	return(0);
264     }
265     if ( suptr->un_cnt == SEMUME ) {
266 	return(EINVAL);
267     } else {
268 	/* printf("adjust:  %08x allocating entry %d as %d:%d(%d)\n",suptr->un_proc,suptr->un_cnt,semid,semnum,adjval); */
269 	sunptr = &(suptr->un_ent[suptr->un_cnt]);
270 	suptr->un_cnt += 1;
271 	sunptr->un_adjval = adjval;
272 	sunptr->un_id = semid; sunptr->un_num = semnum;
273     }
274     return(0);
275 }
276 
277 
278 void
279 semundo_clear(int semid,int semnum)
280 {
281     register struct sem_undo *suptr;
282 
283     for ( suptr = semu_list; suptr != NULL; suptr = suptr->un_next ) {
284 
285 	register struct undo *sunptr = &(suptr->un_ent[0]);
286 	register int i = 0;
287 
288 	while ( i < suptr->un_cnt ) {
289 	    int advance = 1;
290 
291 	    if ( sunptr->un_id == semid ) {
292 		if ( semnum == -1 || sunptr->un_num == semnum ) {
293 		    /* printf("clear:  %08x %d:%d(%d)\n",suptr->un_proc,semid,sunptr->un_num,sunptr->un_adjval); */
294 		    suptr->un_cnt -= 1;
295 		    if ( i < suptr->un_cnt ) {
296 			suptr->un_ent[i] = suptr->un_ent[suptr->un_cnt];
297 			advance = 0;
298 		    }
299 		}
300 		if ( semnum != -1 ) {
301 		    break;
302 		}
303 	    }
304 
305 	    if ( advance ) {
306 		i += 1;
307 		sunptr += 1;
308 	    }
309 
310 	}
311 
312     }
313 
314 }
315 
316 struct semctl_args {
317 	int	semid;
318 	int	semnum;
319 	int	cmd;
320 	union	semun *arg;
321 };
322 
323 int
324 semctl(p, uap, retval)
325 	struct proc *p;
326 	register struct semctl_args *uap;
327 	int *retval;
328 {
329     int semid = uap->semid;
330     int semnum = uap->semnum;
331     int cmd = uap->cmd;
332     union semun *arg = uap->arg;
333     union semun real_arg;
334     struct ucred *cred = p->p_ucred;
335     int i, rval, eval;
336     struct semid_ds sbuf;
337     register struct semid_ds *semaptr;
338 
339 #ifdef SEM_DEBUG
340     printf("call to semctl(%d,%d,%d,0x%x)\n",semid,semnum,cmd,arg);
341 #endif
342 
343     semid = IPCID_TO_IX(semid);
344 
345     if ( semid < 0 || semid >= seminfo.semmsl ) {
346 	/* printf("semid out of range (0<=%d<%d)\n",semid,seminfo.semmsl); */
347 	return(EINVAL);
348     }
349 
350     semaptr = &sema[semid];
351 
352     if ( semaptr->sem_perm.seq != IPCID_TO_SEQ(uap->semid) ) {
353 	/* printf("invalid sequence number\n"); */
354 	return(EINVAL);
355     }
356 
357     if ( (semaptr->sem_perm.mode & SEM_ALLOC) == 0 ) {
358 	/* printf("no such semaphore id\n"); */
359 	return(EINVAL);
360     }
361 
362     eval = 0;
363     rval = 0;
364 
365     switch (cmd) {
366 
367     case IPC_RMID:
368 	if ( cred->cr_uid != 0
369 	&& semaptr->sem_perm.cuid != cred->cr_uid
370 	&& semaptr->sem_perm.uid != cred->cr_uid ) {
371 	    return(EPERM);
372 	}
373 	semaptr->sem_perm.cuid = cred->cr_uid;
374 	semaptr->sem_perm.uid = cred->cr_uid;
375 	semtot -= semaptr->sem_nsems;
376 	for ( i = semaptr->sem_base - sem; i < semtot; i += 1 ) {
377 	    /* printf("0x%x = 0x%x; ",&sem[i],&sem[i + semaptr->sem_nsems]); */
378 	    sem[i] = sem[i + semaptr->sem_nsems];
379 	}
380 	/* printf("\n"); */
381 	for ( i = 0; i < seminfo.semmni; i += 1 ) {
382 	    if ( (sema[i].sem_perm.mode & SEM_ALLOC)
383 	    && sema[i].sem_base > semaptr->sem_base ) {
384 		/* printf("sema[%d].sem_base was 0x%x",i,sema[i].sem_base); */
385 		sema[i].sem_base -= semaptr->sem_nsems;
386 		/* printf(", now 0x%x\n",sema[i].sem_base); */
387 	    }
388 	}
389 	semaptr->sem_perm.mode = 0;
390 
391 	/* Delete any undo entries for this semid */
392 
393 	semundo_clear(semid,-1);
394 
395 	/* Make sure that anybody who is waiting notices the deletion */
396 
397 	wakeup( (caddr_t)semaptr );
398 
399 	break;
400 
401     case IPC_SET:
402 	/* printf("IPC_SET\n"); */
403 	if ( cred->cr_uid != 0
404 	&& semaptr->sem_perm.cuid != cred->cr_uid
405 	&& semaptr->sem_perm.uid != cred->cr_uid ) {
406 	    return(EPERM);
407 	}
408 	if ( (eval = copyin(arg, &real_arg, sizeof(real_arg))) != 0 ) {
409 	    return(eval);
410 	}
411 	if ( (eval = copyin(real_arg.buf, (caddr_t)&sbuf, sizeof(sbuf)) ) != 0 ) {
412 	    return(eval);
413 	}
414 	semaptr->sem_perm.uid = sbuf.sem_perm.uid;
415 	semaptr->sem_perm.gid = sbuf.sem_perm.gid;
416 	semaptr->sem_perm.mode = (semaptr->sem_perm.mode & ~0777)
417 	| (sbuf.sem_perm.mode & 0777);
418 	semaptr->sem_ctime = time.tv_sec;
419 	break;
420 
421     case IPC_STAT:
422 	/* printf("IPC_STAT\n"); */
423 	if ( (eval = ipcaccess(&semaptr->sem_perm, IPC_R, cred)) ) {
424 	    return(eval);
425 	}
426 	rval = 0;
427 	if ( (eval = copyin(arg, &real_arg, sizeof(real_arg))) != 0 ) {
428 	    return(eval);
429 	}
430 	eval = copyout((caddr_t)semaptr, real_arg.buf, sizeof(struct semid_ds)) ;
431 	break;
432 
433     case GETNCNT:
434 	/* printf("GETNCNT(%d)\n",semnum); */
435 	if ( (eval = ipcaccess(&semaptr->sem_perm, IPC_R, cred)) ) {
436 	    return(eval);
437 	}
438 	if ( semnum < 0 || semnum >= semaptr->sem_nsems ) return(EINVAL);
439 	rval = semaptr->sem_base[semnum].semncnt;
440 	break;
441 
442     case GETPID:
443 	/* printf("GETPID(%d)\n",semnum); */
444 	if ( (eval = ipcaccess(&semaptr->sem_perm, IPC_R, cred)) ) {
445 	    return(eval);
446 	}
447 	if ( semnum < 0 || semnum >= semaptr->sem_nsems ) return(EINVAL);
448 	rval = semaptr->sem_base[semnum].sempid;
449 	break;
450 
451     case GETVAL:
452 	/* printf("GETVAL(%d)\n",semnum); */
453 	if ( (eval = ipcaccess(&semaptr->sem_perm, IPC_R, cred)) ) {
454 	    return(eval);
455 	}
456 	if ( semnum < 0 || semnum >= semaptr->sem_nsems ) return(EINVAL);
457 	rval = semaptr->sem_base[semnum].semval;
458 	break;
459 
460     case GETALL:
461 	/* printf("GETALL\n"); */
462 	if ( (eval = ipcaccess(&semaptr->sem_perm, IPC_R, cred)) ) {
463 	    return(eval);
464 	}
465 	rval = 0;
466 	if ( (eval = copyin(arg, &real_arg, sizeof(real_arg))) != 0 ) {
467 	    /* printf("initial copyin failed (addr=0x%x)\n",arg); */
468 	    return(eval);
469 	}
470 	/* printf("%d semaphores\n",semaptr->sem_nsems); */
471 	for ( i = 0; i < semaptr->sem_nsems; i += 1 ) {
472 	    /* printf("copyout to 0x%x\n",&real_arg.array[i]); */
473 	    eval =
474 		copyout((caddr_t)&semaptr->sem_base[i].semval,
475 		&real_arg.array[i],
476 		sizeof(real_arg.array[0]));
477 	    if ( eval != 0 ) {
478 		/* printf("copyout to 0x%x failed\n",&real_arg.array[i]); */
479 		break;
480 	    }
481 	}
482 	break;
483 
484     case GETZCNT:
485 	if ( (eval = ipcaccess(&semaptr->sem_perm, IPC_R, cred)) ) {
486 	    return(eval);
487 	}
488 	/* printf("GETZCNT(%d)\n",semnum); */
489 	if ( semnum < 0 || semnum >= semaptr->sem_nsems ) return(EINVAL);
490 	rval = semaptr->sem_base[semnum].semzcnt;
491 	break;
492 
493     case SETVAL:
494 #ifdef SEM_DEBUG
495 	printf("SETVAL(%d)\n",semnum);
496 #endif
497 	if ( (eval = ipcaccess(&semaptr->sem_perm, IPC_W, cred)) ) {
498 	    return(eval);
499 	}
500 	if ( semnum < 0 || semnum >= semaptr->sem_nsems ) return(EINVAL);
501 	rval = 0;
502 	if ( (eval = copyin(arg, &real_arg, sizeof(real_arg))) != 0 ) {
503 	    return(eval);
504 	}
505 #ifdef SEM_DEBUG
506 	printf("semaptr=%x, sem_base=%x, semptr=%x, oldval=%d, ",
507 	semaptr,semaptr->sem_base,&semaptr->sem_base[semnum],semaptr->sem_base[semnum].semval);
508 #endif
509 	semaptr->sem_base[semnum].semval = real_arg.val;
510 #ifdef SEM_DEBUG
511 	printf(" newval=%d\n", semaptr->sem_base[semnum].semval);
512 #endif
513 	semundo_clear(semid,semnum);
514 	wakeup( (caddr_t)semaptr );	/* somebody else might care */
515 	break;
516 
517     case SETALL:
518 	/* printf("SETALL\n"); */
519 	if ( (eval = ipcaccess(&semaptr->sem_perm, IPC_W, cred)) ) {
520 	    return(eval);
521 	}
522 	rval = 0;
523 	if ( (eval = copyin(arg, &real_arg, sizeof(real_arg))) != 0 ) {
524 	    return(eval);
525 	}
526 	for ( i = 0; i < semaptr->sem_nsems; i += 1 ) {
527 	    eval =
528 		copyin(&real_arg.array[i],
529 		(caddr_t)&semaptr->sem_base[i].semval,
530 		sizeof(real_arg.array[0]));
531 	    if ( eval != 0 ) {
532 		break;
533 	    }
534 	}
535 	semundo_clear(semid,-1);
536 	wakeup( (caddr_t)semaptr );	/* somebody else might care */
537 	break;
538     default:
539 	/* printf("invalid command %d\n",cmd); */
540 	return(EINVAL);
541     }
542 
543     if ( eval == 0 ) {
544 	*retval = rval;
545     }
546     return(eval);
547 }
548 
549 struct semget_args {
550 	key_t	key;
551 	int	nsems;
552 	int	semflg;
553 };
554 
555 int
556 semget(p, uap, retval)
557 	struct proc *p;
558 	register struct semget_args *uap;
559 	int *retval;
560 {
561     int semid, eval;
562     int key = uap->key;
563     int nsems = uap->nsems;
564     int semflg = uap->semflg;
565     struct ucred *cred = p->p_ucred;
566 
567 #ifdef SEM_DEBUG
568     printf("semget(0x%x,%d,0%o)\n",key,nsems,semflg);
569 #endif
570 
571     if ( key == IPC_PRIVATE ) {
572 #ifdef SEM_DEBUG
573 	printf("private key\n");
574 #endif
575 	semid = seminfo.semmni;
576     } else {
577 	for ( semid = 0; semid < seminfo.semmni; semid += 1 ) {
578 	    if ( (sema[semid].sem_perm.mode & SEM_ALLOC)
579 	    && sema[semid].sem_perm.key == key ) {
580 		break;
581 	    }
582 	}
583 	if ( semid < seminfo.semmni ) {
584 #ifdef SEM_DEBUG
585 	    printf("found public key\n");
586 #endif
587 	    if ( (eval = ipcaccess(&sema[semid].sem_perm, semflg & 0700, cred)) ) {
588 		return(eval);
589 	    }
590 	    if ( nsems > 0 && sema[semid].sem_nsems < nsems ) {
591 #ifdef SEM_DEBUG
592 		printf("too small\n");
593 #endif
594 		return(EINVAL);
595 	    }
596 	    if ( (semflg & IPC_CREAT) && (semflg & IPC_EXCL) ) {
597 #ifdef SEM_DEBUG
598 		printf("not exclusive\n");
599 #endif
600 		return(EEXIST);
601 	    }
602 	} else {
603 #ifdef SEM_DEBUG
604 	    printf("didn't find public key\n");
605 #endif
606 	}
607     }
608 
609     if ( semid == seminfo.semmni ) {
610 #ifdef SEM_DEBUG
611 	printf("need to allocate the semid_ds\n");
612 #endif
613 	if ( key == IPC_PRIVATE || (semflg & IPC_CREAT) ) {
614 	    if ( nsems <= 0 || nsems > seminfo.semmsl ) {
615 #ifdef SEM_DEBUG
616 		printf("nsems out of range (0<%d<=%d)\n",nsems,seminfo.semmsl);
617 #endif
618 		return(EINVAL);
619 	    }
620 	    if ( nsems > seminfo.semmns - semtot ) {
621 #ifdef SEM_DEBUG
622 		printf("not enough semaphores left (need %d, got %d)\n",
623 		nsems,seminfo.semmns - semtot);
624 #endif
625 		return(ENOSPC);
626 	    }
627 	    for ( semid = 0; semid < seminfo.semmni; semid += 1 ) {
628 		if ( (sema[semid].sem_perm.mode & SEM_ALLOC) == 0 ) {
629 		    break;
630 		}
631 	    }
632 	    if ( semid == seminfo.semmni ) {
633 #ifdef SEM_DEBUG
634 		printf("no more semid_ds's available\n");
635 #endif
636 		return(ENOSPC);
637 	    }
638 #ifdef SEM_DEBUG
639 	    printf("semid %d is available\n",semid);
640 #endif
641 	    sema[semid].sem_perm.key = key;
642 	    sema[semid].sem_perm.cuid = cred->cr_uid;
643 	    sema[semid].sem_perm.uid = cred->cr_uid;
644 	    sema[semid].sem_perm.cgid = cred->cr_gid;
645 	    sema[semid].sem_perm.gid = cred->cr_gid;
646 	    sema[semid].sem_perm.mode = (semflg & 0777) | SEM_ALLOC;
647 	    sema[semid].sem_perm.seq = (sema[semid].sem_perm.seq + 1) & 0x7fff;	/* avoid semid overflows */
648 	    sema[semid].sem_nsems = nsems;
649 	    sema[semid].sem_otime = 0;
650 	    sema[semid].sem_ctime = time.tv_sec;
651 	    sema[semid].sem_base = &sem[semtot];
652 	    semtot += nsems;
653 	    bzero(sema[semid].sem_base,sizeof(sema[semid].sem_base[0])*nsems);
654 #ifdef SEM_DEBUG
655 	    printf("sembase = 0x%x, next = 0x%x\n",sema[semid].sem_base,&sem[semtot]);
656 #endif
657 	} else {
658 #ifdef SEM_DEBUG
659 	    printf("didn't find it and wasn't asked to create it\n");
660 #endif
661 	    return(ENOENT);
662 	}
663     }
664 
665     *retval = IXSEQ_TO_IPCID(semid,sema[semid].sem_perm);	/* Convert to one origin */
666     return(0);
667 }
668 
669 struct semop_args {
670 	int	semid;
671 	struct	sembuf *sops;
672 	int	nsops;
673 };
674 
675 int
676 semop(p, uap, retval)
677 	struct proc *p;
678 	register struct semop_args *uap;
679 	int *retval;
680 {
681     int semid = uap->semid;
682     int nsops = uap->nsops;
683     struct sembuf sops[MAX_SOPS];
684     register struct semid_ds *semaptr;
685     register struct sembuf *sopptr;
686     register struct sem *semptr;
687     struct sem_undo *suptr = NULL;
688     struct ucred *cred = p->p_ucred;
689     int i, j, eval;
690     int all_ok, do_wakeup, do_undos;
691 
692 #ifdef SEM_DEBUG
693     printf("call to semop(%d,0x%x,%d)\n",semid,sops,nsops);
694 #endif
695 
696     semid = IPCID_TO_IX(semid);	/* Convert back to zero origin */
697 
698     if ( semid < 0 || semid >= seminfo.semmsl ) {
699 	/* printf("semid out of range (0<=%d<%d)\n",semid,seminfo.semmsl); */
700 	return(EINVAL);
701     }
702 
703     semaptr = &sema[semid];
704     if ( (semaptr->sem_perm.mode & SEM_ALLOC) == 0 ) {
705 	/* printf("no such semaphore id\n"); */
706 	return(EINVAL);
707     }
708 
709     if ( semaptr->sem_perm.seq != IPCID_TO_SEQ(uap->semid) ) {
710 	/* printf("invalid sequence number\n"); */
711 	return(EINVAL);
712     }
713 
714     if ( (eval = ipcaccess(&semaptr->sem_perm, IPC_W, cred)) ) {
715 #ifdef SEM_DEBUG
716 	printf("eval = %d from ipaccess\n",eval);
717 #endif
718 	return(eval);
719     }
720 
721     if ( nsops > MAX_SOPS ) {
722 #ifdef SEM_DEBUG
723 	printf("too many sops (max=%d, nsops=%d)\n",MAX_SOPS,nsops);
724 #endif
725 	return(E2BIG);
726     }
727 
728     if ( (eval = copyin(uap->sops, &sops, nsops * sizeof(sops[0]))) != 0 ) {
729 #ifdef SEM_DEBUG
730 	printf("eval = %d from copyin(%08x, %08x, %d)\n",eval,uap->sops,&sops,nsops * sizeof(sops[0]));
731 #endif
732 	return(eval);
733     }
734 
735     /*
736      * Loop trying to satisfy the vector of requests.
737      * If we reach a point where we must wait, any requests already
738      * performed are rolled back and we go to sleep until some other
739      * process wakes us up.  At this point, we start all over again.
740      *
741      * This ensures that from the perspective of other tasks, a set
742      * of requests is atomic (never partially satisfied).
743      */
744 
745     do_undos = 0;
746 
747     while (1) {
748 
749 	do_wakeup = 0;
750 
751 	for ( i = 0; i < nsops; i += 1 ) {
752 
753 	    sopptr = &sops[i];
754 
755 	    if ( sopptr->sem_num >= semaptr->sem_nsems ) {
756 		return(EFBIG);
757 	    }
758 
759 	    semptr = &semaptr->sem_base[sopptr->sem_num];
760 
761 #ifdef SEM_DEBUG
762 	    printf("semop:  semaptr=%x, sem_base=%x, semptr=%x, sem[%d]=%d : op=%d, flag=%s\n",
763 	    semaptr,semaptr->sem_base,semptr,
764 	    sopptr->sem_num,semptr->semval,sopptr->sem_op,
765 	    (sopptr->sem_flg & IPC_NOWAIT) ? "nowait" : "wait");
766 #endif
767 
768 	    if ( sopptr->sem_op < 0 ) {
769 
770 		if ( semptr->semval + sopptr->sem_op < 0 ) {
771 #ifdef SEM_DEBUG
772 		    printf("semop:  can't do it now\n");
773 #endif
774 		    break;
775 		} else {
776 		    semptr->semval += sopptr->sem_op;
777 		    if ( semptr->semval == 0 && semptr->semzcnt > 0 ) {
778 			do_wakeup = 1;
779 		    }
780 		}
781 		if ( sopptr->sem_flg & SEM_UNDO ) {
782 		    do_undos = 1;
783 		}
784 
785 	    } else if ( sopptr->sem_op == 0 ) {
786 
787 		if ( semptr->semval > 0 ) {
788 #ifdef SEM_DEBUG
789 		    printf("semop:  not zero now\n");
790 #endif
791 		    break;
792 		}
793 
794 	    } else {
795 
796 		if ( semptr->semncnt > 0 ) {
797 		    do_wakeup = 1;
798 		}
799 		semptr->semval += sopptr->sem_op;
800 		if ( sopptr->sem_flg & SEM_UNDO ) {
801 		    do_undos = 1;
802 		}
803 
804 	    }
805 	}
806 
807 	/*
808 	 * Did we get through the entire vector?
809 	 */
810 
811 	if ( i < nsops ) {
812 
813 	    /*
814 	     * No ... rollback anything that we've already done
815 	     */
816 
817 #ifdef SEM_DEBUG
818 	    printf("semop:  rollback 0 through %d\n",i-1);
819 #endif
820 	    for ( j = 0; j < i; j += 1 ) {
821 		semaptr->sem_base[sops[j].sem_num].semval -= sops[j].sem_op;
822 	    }
823 
824 	    /*
825 	     * If the request that we couldn't satisfy has the NOWAIT
826 	     * flag set then return with EAGAIN.
827 	     */
828 
829 	    if ( sopptr->sem_flg & IPC_NOWAIT ) {
830 		return(EAGAIN);
831 	    }
832 
833 	    if ( sopptr->sem_op == 0 ) {
834 		semptr->semzcnt += 1;
835 	    } else {
836 		semptr->semncnt += 1;
837 	    }
838 
839 #ifdef SEM_DEBUG
840 	    printf("semop:  good night!\n");
841 #endif
842 	    eval = tsleep( (caddr_t)semaptr, (PZERO - 4) | PCATCH, "sem wait", 0 );
843 #ifdef SEM_DEBUG
844 	    printf("semop:  good morning (eval=%d)!\n",eval);
845 #endif
846 
847 	    suptr = NULL;	/* The sem_undo may have been reallocated */
848 
849 	    if ( eval != 0 ) {
850 		/* printf("semop:  interrupted system call\n"); */
851 		return( EINTR );
852 	    }
853 #ifdef SEM_DEBUG
854 	    printf("semop:  good morning!\n");
855 #endif
856 
857 	    /*
858 	     * Make sure that the semaphore still exists
859 	     */
860 
861 	    if ( (semaptr->sem_perm.mode & SEM_ALLOC) == 0
862 	    || semaptr->sem_perm.seq != IPCID_TO_SEQ(uap->semid) ) {
863 
864 		/* printf("semaphore id deleted\n"); */
865 		/* The man page says to return EIDRM. */
866 		/* Unfortunately, BSD doesn't define that code! */
867 #ifdef EIDRM
868 		return(EIDRM);
869 #else
870 		return(EINVAL);
871 #endif
872 	    }
873 
874 	    /*
875 	     * The semaphore is still alive.  Readjust the count of
876 	     * waiting processes.
877 	     */
878 
879 	    if ( sopptr->sem_op == 0 ) {
880 		semptr->semzcnt -= 1;
881 	    } else {
882 		semptr->semncnt -= 1;
883 	    }
884 
885 
886 	} else {
887 
888 	    /*
889 	     * Yes ... we're done.
890 	     * Process any SEM_UNDO requests.
891 	     */
892 
893 	    if ( do_undos ) {
894 
895 		for ( i = 0; i < nsops; i += 1 ) {
896 
897 		    /* We only need to deal with SEM_UNDO's for non-zero op's */
898 		    int adjval;
899 
900 		    if ( (sops[i].sem_flg & SEM_UNDO) != 0 && (adjval = sops[i].sem_op) != 0 ) {
901 
902 			eval = semundo_adjust(p,&suptr,semid,sops[i].sem_num,-adjval);
903 			if ( eval != 0 ) {
904 
905 			    /*
906 			     * Oh-Oh!  We ran out of either sem_undo's or undo's.
907 			     * Rollback the adjustments to this point and then
908 			     * rollback the semaphore ups and down so we can
909 			     * return with an error with all structures restored.
910 			     * We rollback the undo's in the exact reverse order that
911 			     * we applied them.  This guarantees that we won't run
912 			     * out of space as we roll things back out.
913 			     */
914 
915 			    for ( j = i - 1; j >= 0; j -= 1 ) {
916 
917 				if ( (sops[i].sem_flg & SEM_UNDO) != 0 && (adjval = sops[i].sem_op) != 0 ) {
918 
919 				    if ( semundo_adjust(p,&suptr,semid,sops[j].sem_num,adjval) != 0 ) {
920 
921 					/* This is impossible!  */
922 					panic("semop - can't undo undos");
923 
924 				    }
925 				}
926 
927 			    } /* loop backwards through sops */
928 
929 			    for ( j = 0; j < nsops; j += 1 ) {
930 				semaptr->sem_base[sops[j].sem_num].semval -= sops[j].sem_op;
931 			    }
932 
933 #ifdef SEM_DEBUG
934 			    printf("eval = %d from semundo_adjust\n",eval);
935 #endif
936 			    return( eval );
937 
938 			} /* semundo_adjust failed */
939 
940 		    } /* if ( SEM_UNDO && adjval != 0 ) */
941 
942 		} /* loop through the sops */
943 
944 	    } /* if ( do_undos ) */
945 
946 	    /* We're definitely done - set the sempid's */
947 
948 	    for ( i = 0; i < nsops; i += 1 ) {
949 
950 		sopptr = &sops[i];
951 		semptr = &semaptr->sem_base[sopptr->sem_num];
952 		semptr->sempid = p->p_pid;
953 
954 	    }
955 
956 	    /* Do a wakeup if any semaphore was up'd. */
957 
958 	    if ( do_wakeup ) {
959 #ifdef SEM_DEBUG
960 		printf("semop:  doing wakeup\n");
961 #ifdef SEM_WAKEUP
962 		sem_wakeup( (caddr_t)semaptr );
963 #else
964 		wakeup( (caddr_t)semaptr );
965 #endif
966 		printf("semop:  back from wakeup\n");
967 #else
968 		wakeup( (caddr_t)semaptr );
969 #endif
970 	    }
971 #ifdef SEM_DEBUG
972 	    printf("semop:  done\n");
973 #endif
974 	    *retval = 0;
975 	    return(0);
976 
977 	}
978 
979     }
980 
981     panic("semop: how did we get here???");
982 }
983 
984 /*
985  * Go through the undo structures for this process and apply the
986  * adjustments to semaphores.
987  */
988 
989 semexit(p)
990     struct proc *p;
991 {
992     register struct sem_undo *suptr;
993     register struct sem_undo **supptr;
994     int did_something;
995 
996     /*
997      * If somebody else is holding the global semaphore facility lock
998      * then sleep until it is released.
999      */
1000 
1001     while ( semlock_holder != NULL && semlock_holder != p ) {
1002 #ifdef SEM_DEBUG
1003 	printf("semaphore facility locked - sleeping ...\n");
1004 #endif
1005 	sleep( (caddr_t)&semlock_holder, (PZERO - 4) );
1006     }
1007 
1008     did_something = 0;
1009 
1010     /*
1011      * Go through the chain of undo vectors looking for one
1012      * associated with this process.
1013      */
1014 
1015     for ( supptr = &semu_list;
1016     (suptr = *supptr) != NULL;
1017     supptr = &(suptr->un_next)
1018     ) {
1019 
1020 	if ( suptr->un_proc == p ) {
1021 
1022 #ifdef SEM_DEBUG
1023 	    printf("proc @%08x has undo structure with %d entries\n",p,suptr->un_cnt);
1024 #endif
1025 
1026 	    /*
1027 	     * If there are any active undo elements then process them.
1028 	     */
1029 
1030 	    if ( suptr->un_cnt > 0 ) {
1031 
1032 		int ix;
1033 
1034 		for ( ix = 0; ix < suptr->un_cnt; ix += 1 ) {
1035 
1036 		    int semid = suptr->un_ent[ix].un_id;
1037 		    int semnum = suptr->un_ent[ix].un_num;
1038 		    int adjval = suptr->un_ent[ix].un_adjval;
1039 		    struct semid_ds *semaptr;
1040 
1041 		    semaptr = &sema[semid];
1042 		    if ( (semaptr->sem_perm.mode & SEM_ALLOC) == 0 ) {
1043 			panic("semexit - semid not allocated");
1044 		    }
1045 		    if ( semnum >= semaptr->sem_nsems ) {
1046 			panic("semexit - semnum out of range");
1047 		    }
1048 
1049 #ifdef SEM_DEBUG
1050 		    printf("semexit:  %08x id=%d num=%d(adj=%d) ; sem=%d\n",suptr->un_proc,
1051 		    suptr->un_ent[ix].un_id,suptr->un_ent[ix].un_num,suptr->un_ent[ix].un_adjval,
1052 		    semaptr->sem_base[semnum].semval);
1053 #endif
1054 
1055 		    if ( adjval < 0 ) {
1056 			if ( semaptr->sem_base[semnum].semval < -adjval ) {
1057 			    semaptr->sem_base[semnum].semval = 0;
1058 			} else {
1059 			    semaptr->sem_base[semnum].semval += adjval;
1060 			}
1061 		    } else {
1062 			semaptr->sem_base[semnum].semval += adjval;
1063 		    }
1064 
1065 		    /* printf("semval now %d\n",semaptr->sem_base[semnum].semval); */
1066 
1067 #ifdef SEM_WAKEUP
1068 		    sem_wakeup((caddr_t)semaptr);	/* A little sloppy (we should KNOW if anybody is waiting). */
1069 #else
1070 		    wakeup((caddr_t)semaptr);		/* A little sloppy (we should KNOW if anybody is waiting). */
1071 #endif
1072 #ifdef SEM_DEBUG
1073 		    printf("semexit:  back from wakeup\n");
1074 #endif
1075 
1076 		}
1077 
1078 	    }
1079 
1080 	    /*
1081 	     * Deallocate the undo vector.
1082 	     */
1083 
1084 #ifdef SEM_DEBUG
1085 	    printf("removing vector\n");
1086 #endif
1087 	    suptr->un_proc = NULL;
1088 	    *supptr = suptr->un_next;
1089 
1090 	    /* Done. */
1091 
1092 	    break;
1093 
1094 
1095 	}
1096 
1097     }
1098 
1099     /*
1100      * If the exiting process is holding the global semaphore facility
1101      * lock then release it.
1102      */
1103 
1104     if ( semlock_holder == p ) {
1105 	semlock_holder = NULL;
1106 	wakeup( (caddr_t)&semlock_holder );
1107     }
1108 }
1109 #endif
1110