7205c62933
A previous change moved property_service into its own thread, since there was otherwise a deadlock whenever a process called by init would try to set a property. This new thread, however, would send a message via a blocking socket to init for each property that it received, since init may need to take action depending on which property it is. Unfortunately, this means that the deadlock is still possible, the only difference is the socket's buffer must be filled before init deadlocks. There are possible partial solutions here: the socket's buffer may be increased or property_service may only send messages for the properties that init will take action on, however all of these solutions still lead to eventual deadlock. The only complete solution is to handle these messages asynchronously. This change, therefore, adds the following: 1) A lock for instructing init to reboot 2) A lock for waiting on properties 3) A lock for queueing new properties 4) A lock for any actions with ServiceList or any Services, enforced through thread annotations, particularly since this code was not designed with the intention of being multi-threaded. Bug: 146877356 Bug: 148236233 Test: boot Test: kill hwservicemanager without deadlock Change-Id: I84108e54217866205a48c45e8b59355012c32ea8
137 lines
4.6 KiB
C++
137 lines
4.6 KiB
C++
/*
|
|
* Copyright (C) 2010 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#include "sigchld_handler.h"
|
|
|
|
#include <signal.h>
|
|
#include <string.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/types.h>
|
|
#include <sys/wait.h>
|
|
#include <unistd.h>
|
|
|
|
#include <android-base/chrono_utils.h>
|
|
#include <android-base/logging.h>
|
|
#include <android-base/scopeguard.h>
|
|
#include <android-base/stringprintf.h>
|
|
|
|
#include <thread>
|
|
|
|
#include "init.h"
|
|
#include "service.h"
|
|
#include "service_list.h"
|
|
|
|
using android::base::boot_clock;
|
|
using android::base::make_scope_guard;
|
|
using android::base::StringPrintf;
|
|
using android::base::Timer;
|
|
|
|
namespace android {
|
|
namespace init {
|
|
|
|
static pid_t ReapOneProcess() {
|
|
siginfo_t siginfo = {};
|
|
// This returns a zombie pid or informs us that there are no zombies left to be reaped.
|
|
// It does NOT reap the pid; that is done below.
|
|
if (TEMP_FAILURE_RETRY(waitid(P_ALL, 0, &siginfo, WEXITED | WNOHANG | WNOWAIT)) != 0) {
|
|
PLOG(ERROR) << "waitid failed";
|
|
return 0;
|
|
}
|
|
|
|
auto pid = siginfo.si_pid;
|
|
if (pid == 0) return 0;
|
|
|
|
// At this point we know we have a zombie pid, so we use this scopeguard to reap the pid
|
|
// whenever the function returns from this point forward.
|
|
// We do NOT want to reap the zombie earlier as in Service::Reap(), we kill(-pid, ...) and we
|
|
// want the pid to remain valid throughout that (and potentially future) usages.
|
|
auto reaper = make_scope_guard([pid] { TEMP_FAILURE_RETRY(waitpid(pid, nullptr, WNOHANG)); });
|
|
|
|
std::string name;
|
|
std::string wait_string;
|
|
Service* service = nullptr;
|
|
|
|
auto lock = std::lock_guard{service_lock};
|
|
|
|
if (SubcontextChildReap(pid)) {
|
|
name = "Subcontext";
|
|
} else {
|
|
service = ServiceList::GetInstance().FindService(pid, &Service::pid);
|
|
|
|
if (service) {
|
|
name = StringPrintf("Service '%s' (pid %d)", service->name().c_str(), pid);
|
|
if (service->flags() & SVC_EXEC) {
|
|
auto exec_duration = boot_clock::now() - service->time_started();
|
|
auto exec_duration_ms =
|
|
std::chrono::duration_cast<std::chrono::milliseconds>(exec_duration).count();
|
|
wait_string = StringPrintf(" waiting took %f seconds", exec_duration_ms / 1000.0f);
|
|
} else if (service->flags() & SVC_ONESHOT) {
|
|
auto exec_duration = boot_clock::now() - service->time_started();
|
|
auto exec_duration_ms =
|
|
std::chrono::duration_cast<std::chrono::milliseconds>(exec_duration)
|
|
.count();
|
|
wait_string = StringPrintf(" oneshot service took %f seconds in background",
|
|
exec_duration_ms / 1000.0f);
|
|
}
|
|
} else {
|
|
name = StringPrintf("Untracked pid %d", pid);
|
|
}
|
|
}
|
|
|
|
if (siginfo.si_code == CLD_EXITED) {
|
|
LOG(INFO) << name << " exited with status " << siginfo.si_status << wait_string;
|
|
} else {
|
|
LOG(INFO) << name << " received signal " << siginfo.si_status << wait_string;
|
|
}
|
|
|
|
if (!service) return pid;
|
|
|
|
service->Reap(siginfo);
|
|
|
|
if (service->flags() & SVC_TEMPORARY) {
|
|
ServiceList::GetInstance().RemoveService(*service);
|
|
}
|
|
|
|
return pid;
|
|
}
|
|
|
|
void ReapAnyOutstandingChildren() {
|
|
while (ReapOneProcess() != 0) {
|
|
}
|
|
}
|
|
|
|
void WaitToBeReaped(const std::vector<pid_t>& pids, std::chrono::milliseconds timeout) {
|
|
Timer t;
|
|
std::vector<pid_t> alive_pids(pids.begin(), pids.end());
|
|
while (!alive_pids.empty() && t.duration() < timeout) {
|
|
pid_t pid;
|
|
while ((pid = ReapOneProcess()) != 0) {
|
|
auto it = std::find(alive_pids.begin(), alive_pids.end(), pid);
|
|
if (it != alive_pids.end()) {
|
|
alive_pids.erase(it);
|
|
}
|
|
}
|
|
if (alive_pids.empty()) {
|
|
break;
|
|
}
|
|
std::this_thread::sleep_for(50ms);
|
|
}
|
|
LOG(INFO) << "Waiting for " << pids.size() << " pids to be reaped took " << t << " with "
|
|
<< alive_pids.size() << " of them still running";
|
|
}
|
|
|
|
} // namespace init
|
|
} // namespace android
|