kmap_types.h: rename D macro
[linux-2.6-block.git] / kernel / exit.c
CommitLineData
1da177e4
LT
1/*
2 * linux/kernel/exit.c
3 *
4 * Copyright (C) 1991, 1992 Linus Torvalds
5 */
6
1da177e4
LT
7#include <linux/mm.h>
8#include <linux/slab.h>
9#include <linux/interrupt.h>
1da177e4 10#include <linux/module.h>
c59ede7b 11#include <linux/capability.h>
1da177e4
LT
12#include <linux/completion.h>
13#include <linux/personality.h>
14#include <linux/tty.h>
da9cbc87 15#include <linux/iocontext.h>
1da177e4
LT
16#include <linux/key.h>
17#include <linux/security.h>
18#include <linux/cpu.h>
19#include <linux/acct.h>
8f0ab514 20#include <linux/tsacct_kern.h>
1da177e4 21#include <linux/file.h>
9f3acc31 22#include <linux/fdtable.h>
1da177e4 23#include <linux/binfmts.h>
ab516013 24#include <linux/nsproxy.h>
84d73786 25#include <linux/pid_namespace.h>
1da177e4
LT
26#include <linux/ptrace.h>
27#include <linux/profile.h>
28#include <linux/mount.h>
29#include <linux/proc_fs.h>
49d769d5 30#include <linux/kthread.h>
1da177e4 31#include <linux/mempolicy.h>
c757249a 32#include <linux/taskstats_kern.h>
ca74e92b 33#include <linux/delayacct.h>
83144186 34#include <linux/freezer.h>
b4f48b63 35#include <linux/cgroup.h>
1da177e4 36#include <linux/syscalls.h>
7ed20e1a 37#include <linux/signal.h>
6a14c5c9 38#include <linux/posix-timers.h>
9f46080c 39#include <linux/cn_proc.h>
de5097c2 40#include <linux/mutex.h>
0771dfef 41#include <linux/futex.h>
b92ce558 42#include <linux/pipe_fs_i.h>
fa84cb93 43#include <linux/audit.h> /* for audit_free() */
83cc5ed3 44#include <linux/resource.h>
0d67a46d 45#include <linux/blkdev.h>
6eaeeaba 46#include <linux/task_io_accounting_ops.h>
30199f5a 47#include <linux/tracehook.h>
5ad4e53b 48#include <linux/fs_struct.h>
d84f4f99 49#include <linux/init_task.h>
cdd6c482 50#include <linux/perf_event.h>
ad8d75ff 51#include <trace/events/sched.h>
1da177e4
LT
52
53#include <asm/uaccess.h>
54#include <asm/unistd.h>
55#include <asm/pgtable.h>
56#include <asm/mmu_context.h>
d84f4f99 57#include "cred-internals.h"
1da177e4 58
408b664a
AB
59static void exit_mm(struct task_struct * tsk);
60
1da177e4
LT
61static void __unhash_process(struct task_struct *p)
62{
63 nr_threads--;
64 detach_pid(p, PIDTYPE_PID);
1da177e4
LT
65 if (thread_group_leader(p)) {
66 detach_pid(p, PIDTYPE_PGID);
67 detach_pid(p, PIDTYPE_SID);
c97d9893 68
5e85d4ab 69 list_del_rcu(&p->tasks);
73b9ebfe 70 __get_cpu_var(process_counts)--;
1da177e4 71 }
47e65328 72 list_del_rcu(&p->thread_group);
f470021a 73 list_del_init(&p->sibling);
1da177e4
LT
74}
75
6a14c5c9
ON
76/*
77 * This function expects the tasklist_lock write-locked.
78 */
79static void __exit_signal(struct task_struct *tsk)
80{
81 struct signal_struct *sig = tsk->signal;
82 struct sighand_struct *sighand;
83
84 BUG_ON(!sig);
85 BUG_ON(!atomic_read(&sig->count));
86
6a14c5c9
ON
87 sighand = rcu_dereference(tsk->sighand);
88 spin_lock(&sighand->siglock);
89
90 posix_cpu_timers_exit(tsk);
91 if (atomic_dec_and_test(&sig->count))
92 posix_cpu_timers_exit_group(tsk);
93 else {
94 /*
95 * If there is any task waiting for the group exit
96 * then notify it:
97 */
6db840fa 98 if (sig->group_exit_task && atomic_read(&sig->count) == sig->notify_count)
6a14c5c9 99 wake_up_process(sig->group_exit_task);
6db840fa 100
6a14c5c9
ON
101 if (tsk == sig->curr_target)
102 sig->curr_target = next_thread(tsk);
103 /*
104 * Accumulate here the counters for all threads but the
105 * group leader as they die, so they can be added into
106 * the process-wide totals when those are taken.
107 * The group leader stays around as a zombie as long
108 * as there are other threads. When it gets reaped,
109 * the exit.c code will add its counts into these totals.
110 * We won't ever get here for the group leader, since it
111 * will have been the last reference on the signal_struct.
112 */
32bd671d
PZ
113 sig->utime = cputime_add(sig->utime, task_utime(tsk));
114 sig->stime = cputime_add(sig->stime, task_stime(tsk));
49048622 115 sig->gtime = cputime_add(sig->gtime, task_gtime(tsk));
6a14c5c9
ON
116 sig->min_flt += tsk->min_flt;
117 sig->maj_flt += tsk->maj_flt;
118 sig->nvcsw += tsk->nvcsw;
119 sig->nivcsw += tsk->nivcsw;
6eaeeaba
ED
120 sig->inblock += task_io_get_inblock(tsk);
121 sig->oublock += task_io_get_oublock(tsk);
5995477a 122 task_io_accounting_add(&sig->ioac, &tsk->ioac);
32bd671d 123 sig->sum_sched_runtime += tsk->se.sum_exec_runtime;
6a14c5c9
ON
124 sig = NULL; /* Marker for below. */
125 }
126
5876700c
ON
127 __unhash_process(tsk);
128
da7978b0
ON
129 /*
130 * Do this under ->siglock, we can race with another thread
131 * doing sigqueue_free() if we have SIGQUEUE_PREALLOC signals.
132 */
133 flush_sigqueue(&tsk->pending);
134
6a14c5c9 135 tsk->signal = NULL;
a7e5328a 136 tsk->sighand = NULL;
6a14c5c9 137 spin_unlock(&sighand->siglock);
6a14c5c9 138
a7e5328a 139 __cleanup_sighand(sighand);
6a14c5c9 140 clear_tsk_thread_flag(tsk,TIF_SIGPENDING);
6a14c5c9
ON
141 if (sig) {
142 flush_sigqueue(&sig->shared_pending);
093a8e8a 143 taskstats_tgid_free(sig);
ad474cac
ON
144 /*
145 * Make sure ->signal can't go away under rq->lock,
146 * see account_group_exec_runtime().
147 */
148 task_rq_unlock_wait(tsk);
6a14c5c9
ON
149 __cleanup_signal(sig);
150 }
151}
152
8c7904a0
EB
153static void delayed_put_task_struct(struct rcu_head *rhp)
154{
0a16b607
MD
155 struct task_struct *tsk = container_of(rhp, struct task_struct, rcu);
156
cdd6c482
IM
157#ifdef CONFIG_PERF_EVENTS
158 WARN_ON_ONCE(tsk->perf_event_ctxp);
eef6cbf5 159#endif
0a16b607
MD
160 trace_sched_process_free(tsk);
161 put_task_struct(tsk);
8c7904a0
EB
162}
163
f470021a 164
1da177e4
LT
165void release_task(struct task_struct * p)
166{
36c8b586 167 struct task_struct *leader;
1da177e4 168 int zap_leader;
1f09f974 169repeat:
dae33574 170 tracehook_prepare_release_task(p);
c69e8d9c
DH
171 /* don't need to get the RCU readlock here - the process is dead and
172 * can't be modifying its own credentials */
173 atomic_dec(&__task_cred(p)->user->processes);
174
60347f67 175 proc_flush_task(p);
0203026b 176
1da177e4 177 write_lock_irq(&tasklist_lock);
dae33574 178 tracehook_finish_release_task(p);
1da177e4 179 __exit_signal(p);
35f5cad8 180
1da177e4
LT
181 /*
182 * If we are the last non-leader member of the thread
183 * group, and the leader is zombie, then notify the
184 * group leader's parent process. (if it wants notification.)
185 */
186 zap_leader = 0;
187 leader = p->group_leader;
188 if (leader != p && thread_group_empty(leader) && leader->exit_state == EXIT_ZOMBIE) {
d839fd4d 189 BUG_ON(task_detached(leader));
1da177e4
LT
190 do_notify_parent(leader, leader->exit_signal);
191 /*
192 * If we were the last child thread and the leader has
193 * exited already, and the leader's parent ignores SIGCHLD,
194 * then we are the one who should release the leader.
195 *
196 * do_notify_parent() will have marked it self-reaping in
197 * that case.
198 */
d839fd4d 199 zap_leader = task_detached(leader);
dae33574
RM
200
201 /*
202 * This maintains the invariant that release_task()
203 * only runs on a task in EXIT_DEAD, just for sanity.
204 */
205 if (zap_leader)
206 leader->exit_state = EXIT_DEAD;
1da177e4
LT
207 }
208
1da177e4 209 write_unlock_irq(&tasklist_lock);
1da177e4 210 release_thread(p);
8c7904a0 211 call_rcu(&p->rcu, delayed_put_task_struct);
1da177e4
LT
212
213 p = leader;
214 if (unlikely(zap_leader))
215 goto repeat;
216}
217
1da177e4
LT
218/*
219 * This checks not only the pgrp, but falls back on the pid if no
220 * satisfactory pgrp is found. I dunno - gdb doesn't work correctly
221 * without this...
04a2e6a5
EB
222 *
223 * The caller must hold rcu lock or the tasklist lock.
1da177e4 224 */
04a2e6a5 225struct pid *session_of_pgrp(struct pid *pgrp)
1da177e4
LT
226{
227 struct task_struct *p;
04a2e6a5 228 struct pid *sid = NULL;
62dfb554 229
04a2e6a5 230 p = pid_task(pgrp, PIDTYPE_PGID);
62dfb554 231 if (p == NULL)
04a2e6a5 232 p = pid_task(pgrp, PIDTYPE_PID);
62dfb554 233 if (p != NULL)
04a2e6a5 234 sid = task_session(p);
62dfb554 235
1da177e4
LT
236 return sid;
237}
238
239/*
240 * Determine if a process group is "orphaned", according to the POSIX
241 * definition in 2.2.2.52. Orphaned process groups are not to be affected
242 * by terminal-generated stop signals. Newly orphaned process groups are
243 * to receive a SIGHUP and a SIGCONT.
244 *
245 * "I ask you, have you ever known what it is to be an orphan?"
246 */
0475ac08 247static int will_become_orphaned_pgrp(struct pid *pgrp, struct task_struct *ignored_task)
1da177e4
LT
248{
249 struct task_struct *p;
1da177e4 250
0475ac08 251 do_each_pid_task(pgrp, PIDTYPE_PGID, p) {
05e83df6
ON
252 if ((p == ignored_task) ||
253 (p->exit_state && thread_group_empty(p)) ||
254 is_global_init(p->real_parent))
1da177e4 255 continue;
05e83df6 256
0475ac08 257 if (task_pgrp(p->real_parent) != pgrp &&
05e83df6
ON
258 task_session(p->real_parent) == task_session(p))
259 return 0;
0475ac08 260 } while_each_pid_task(pgrp, PIDTYPE_PGID, p);
05e83df6
ON
261
262 return 1;
1da177e4
LT
263}
264
3e7cd6c4 265int is_current_pgrp_orphaned(void)
1da177e4
LT
266{
267 int retval;
268
269 read_lock(&tasklist_lock);
3e7cd6c4 270 retval = will_become_orphaned_pgrp(task_pgrp(current), NULL);
1da177e4
LT
271 read_unlock(&tasklist_lock);
272
273 return retval;
274}
275
0475ac08 276static int has_stopped_jobs(struct pid *pgrp)
1da177e4
LT
277{
278 int retval = 0;
279 struct task_struct *p;
280
0475ac08 281 do_each_pid_task(pgrp, PIDTYPE_PGID, p) {
338077e5 282 if (!task_is_stopped(p))
1da177e4 283 continue;
1da177e4
LT
284 retval = 1;
285 break;
0475ac08 286 } while_each_pid_task(pgrp, PIDTYPE_PGID, p);
1da177e4
LT
287 return retval;
288}
289
f49ee505
ON
290/*
291 * Check to see if any process groups have become orphaned as
292 * a result of our exiting, and if they have any stopped jobs,
293 * send them a SIGHUP and then a SIGCONT. (POSIX 3.2.2.2)
294 */
295static void
296kill_orphaned_pgrp(struct task_struct *tsk, struct task_struct *parent)
297{
298 struct pid *pgrp = task_pgrp(tsk);
299 struct task_struct *ignored_task = tsk;
300
301 if (!parent)
302 /* exit: our father is in a different pgrp than
303 * we are and we were the only connection outside.
304 */
305 parent = tsk->real_parent;
306 else
307 /* reparent: our child is in a different pgrp than
308 * we are, and it was the only connection outside.
309 */
310 ignored_task = NULL;
311
312 if (task_pgrp(parent) != pgrp &&
313 task_session(parent) == task_session(tsk) &&
314 will_become_orphaned_pgrp(pgrp, ignored_task) &&
315 has_stopped_jobs(pgrp)) {
316 __kill_pgrp_info(SIGHUP, SEND_SIG_PRIV, pgrp);
317 __kill_pgrp_info(SIGCONT, SEND_SIG_PRIV, pgrp);
318 }
319}
320
1da177e4 321/**
49d769d5 322 * reparent_to_kthreadd - Reparent the calling kernel thread to kthreadd
1da177e4
LT
323 *
324 * If a kernel thread is launched as a result of a system call, or if
49d769d5
EB
325 * it ever exits, it should generally reparent itself to kthreadd so it
326 * isn't in the way of other processes and is correctly cleaned up on exit.
1da177e4
LT
327 *
328 * The various task state such as scheduling policy and priority may have
329 * been inherited from a user process, so we reset them to sane values here.
330 *
49d769d5 331 * NOTE that reparent_to_kthreadd() gives the caller full capabilities.
1da177e4 332 */
49d769d5 333static void reparent_to_kthreadd(void)
1da177e4
LT
334{
335 write_lock_irq(&tasklist_lock);
336
337 ptrace_unlink(current);
338 /* Reparent to init */
49d769d5 339 current->real_parent = current->parent = kthreadd_task;
f470021a 340 list_move_tail(&current->sibling, &current->real_parent->children);
1da177e4
LT
341
342 /* Set the exit signal to SIGCHLD so we signal init on exit */
343 current->exit_signal = SIGCHLD;
344
e05606d3 345 if (task_nice(current) < 0)
1da177e4
LT
346 set_user_nice(current, 0);
347 /* cpus_allowed? */
348 /* rt_priority? */
349 /* signals? */
1da177e4
LT
350 memcpy(current->signal->rlim, init_task.signal->rlim,
351 sizeof(current->signal->rlim));
d84f4f99
DH
352
353 atomic_inc(&init_cred.usage);
354 commit_creds(&init_cred);
1da177e4 355 write_unlock_irq(&tasklist_lock);
1da177e4
LT
356}
357
8520d7c7 358void __set_special_pids(struct pid *pid)
1da177e4 359{
e19f247a 360 struct task_struct *curr = current->group_leader;
1da177e4 361
02b51df1 362 if (task_session(curr) != pid) {
7d8da096 363 change_pid(curr, PIDTYPE_SID, pid);
02b51df1
SJR
364 proc_sid_connector(curr);
365 }
1b0f7ffd
ON
366
367 if (task_pgrp(curr) != pid)
7d8da096 368 change_pid(curr, PIDTYPE_PGID, pid);
1da177e4
LT
369}
370
8520d7c7 371static void set_special_pids(struct pid *pid)
1da177e4
LT
372{
373 write_lock_irq(&tasklist_lock);
8520d7c7 374 __set_special_pids(pid);
1da177e4
LT
375 write_unlock_irq(&tasklist_lock);
376}
377
378/*
87245135
ON
379 * Let kernel threads use this to say that they allow a certain signal.
380 * Must not be used if kthread was cloned with CLONE_SIGHAND.
1da177e4
LT
381 */
382int allow_signal(int sig)
383{
7ed20e1a 384 if (!valid_signal(sig) || sig < 1)
1da177e4
LT
385 return -EINVAL;
386
387 spin_lock_irq(&current->sighand->siglock);
87245135 388 /* This is only needed for daemonize()'ed kthreads */
1da177e4 389 sigdelset(&current->blocked, sig);
87245135
ON
390 /*
391 * Kernel threads handle their own signals. Let the signal code
392 * know it'll be handled, so that they don't get converted to
393 * SIGKILL or just silently dropped.
394 */
395 current->sighand->action[(sig)-1].sa.sa_handler = (void __user *)2;
1da177e4
LT
396 recalc_sigpending();
397 spin_unlock_irq(&current->sighand->siglock);
398 return 0;
399}
400
401EXPORT_SYMBOL(allow_signal);
402
403int disallow_signal(int sig)
404{
7ed20e1a 405 if (!valid_signal(sig) || sig < 1)
1da177e4
LT
406 return -EINVAL;
407
408 spin_lock_irq(&current->sighand->siglock);
10ab825b 409 current->sighand->action[(sig)-1].sa.sa_handler = SIG_IGN;
1da177e4
LT
410 recalc_sigpending();
411 spin_unlock_irq(&current->sighand->siglock);
412 return 0;
413}
414
415EXPORT_SYMBOL(disallow_signal);
416
417/*
418 * Put all the gunge required to become a kernel thread without
419 * attached user resources in one place where it belongs.
420 */
421
422void daemonize(const char *name, ...)
423{
424 va_list args;
1da177e4
LT
425 sigset_t blocked;
426
427 va_start(args, name);
428 vsnprintf(current->comm, sizeof(current->comm), name, args);
429 va_end(args);
430
431 /*
432 * If we were started as result of loading a module, close all of the
433 * user space pages. We don't need them, and if we didn't close them
434 * they would be locked into memory.
435 */
436 exit_mm(current);
83144186
RW
437 /*
438 * We don't want to have TIF_FREEZE set if the system-wide hibernation
439 * or suspend transition begins right now.
440 */
7b34e428 441 current->flags |= (PF_NOFREEZE | PF_KTHREAD);
1da177e4 442
8520d7c7
ON
443 if (current->nsproxy != &init_nsproxy) {
444 get_nsproxy(&init_nsproxy);
445 switch_task_namespaces(current, &init_nsproxy);
446 }
297bd42b 447 set_special_pids(&init_struct_pid);
24ec839c 448 proc_clear_tty(current);
1da177e4
LT
449
450 /* Block and flush all signals */
451 sigfillset(&blocked);
452 sigprocmask(SIG_BLOCK, &blocked, NULL);
453 flush_signals(current);
454
455 /* Become as one with the init task */
456
3e93cd67 457 daemonize_fs_struct();
d4c5e41f 458 exit_files(current);
1da177e4
LT
459 current->files = init_task.files;
460 atomic_inc(&current->files->count);
461
49d769d5 462 reparent_to_kthreadd();
1da177e4
LT
463}
464
465EXPORT_SYMBOL(daemonize);
466
858119e1 467static void close_files(struct files_struct * files)
1da177e4
LT
468{
469 int i, j;
badf1662 470 struct fdtable *fdt;
1da177e4
LT
471
472 j = 0;
4fb3a538
DS
473
474 /*
475 * It is safe to dereference the fd table without RCU or
476 * ->file_lock because this is the last reference to the
477 * files structure.
478 */
badf1662 479 fdt = files_fdtable(files);
1da177e4
LT
480 for (;;) {
481 unsigned long set;
482 i = j * __NFDBITS;
bbea9f69 483 if (i >= fdt->max_fds)
1da177e4 484 break;
badf1662 485 set = fdt->open_fds->fds_bits[j++];
1da177e4
LT
486 while (set) {
487 if (set & 1) {
badf1662 488 struct file * file = xchg(&fdt->fd[i], NULL);
944be0b2 489 if (file) {
1da177e4 490 filp_close(file, files);
944be0b2
IM
491 cond_resched();
492 }
1da177e4
LT
493 }
494 i++;
495 set >>= 1;
496 }
497 }
498}
499
500struct files_struct *get_files_struct(struct task_struct *task)
501{
502 struct files_struct *files;
503
504 task_lock(task);
505 files = task->files;
506 if (files)
507 atomic_inc(&files->count);
508 task_unlock(task);
509
510 return files;
511}
512
7ad5b3a5 513void put_files_struct(struct files_struct *files)
1da177e4 514{
badf1662
DS
515 struct fdtable *fdt;
516
1da177e4
LT
517 if (atomic_dec_and_test(&files->count)) {
518 close_files(files);
519 /*
520 * Free the fd and fdset arrays if we expanded them.
ab2af1f5
DS
521 * If the fdtable was embedded, pass files for freeing
522 * at the end of the RCU grace period. Otherwise,
523 * you can free files immediately.
1da177e4 524 */
badf1662 525 fdt = files_fdtable(files);
4fd45812 526 if (fdt != &files->fdtab)
ab2af1f5 527 kmem_cache_free(files_cachep, files);
01b2d93c 528 free_fdtable(fdt);
1da177e4
LT
529 }
530}
531
3b125388 532void reset_files_struct(struct files_struct *files)
3b9b8ab6 533{
3b125388 534 struct task_struct *tsk = current;
3b9b8ab6
KK
535 struct files_struct *old;
536
537 old = tsk->files;
538 task_lock(tsk);
539 tsk->files = files;
540 task_unlock(tsk);
541 put_files_struct(old);
542}
3b9b8ab6 543
1ec7f1dd 544void exit_files(struct task_struct *tsk)
1da177e4
LT
545{
546 struct files_struct * files = tsk->files;
547
548 if (files) {
549 task_lock(tsk);
550 tsk->files = NULL;
551 task_unlock(tsk);
552 put_files_struct(files);
553 }
554}
555
cf475ad2
BS
556#ifdef CONFIG_MM_OWNER
557/*
558 * Task p is exiting and it owned mm, lets find a new owner for it
559 */
560static inline int
561mm_need_new_owner(struct mm_struct *mm, struct task_struct *p)
562{
563 /*
564 * If there are other users of the mm and the owner (us) is exiting
565 * we need to find a new owner to take on the responsibility.
566 */
cf475ad2
BS
567 if (atomic_read(&mm->mm_users) <= 1)
568 return 0;
569 if (mm->owner != p)
570 return 0;
571 return 1;
572}
573
574void mm_update_next_owner(struct mm_struct *mm)
575{
576 struct task_struct *c, *g, *p = current;
577
578retry:
579 if (!mm_need_new_owner(mm, p))
580 return;
581
582 read_lock(&tasklist_lock);
583 /*
584 * Search in the children
585 */
586 list_for_each_entry(c, &p->children, sibling) {
587 if (c->mm == mm)
588 goto assign_new_owner;
589 }
590
591 /*
592 * Search in the siblings
593 */
dea33cfd 594 list_for_each_entry(c, &p->real_parent->children, sibling) {
cf475ad2
BS
595 if (c->mm == mm)
596 goto assign_new_owner;
597 }
598
599 /*
600 * Search through everything else. We should not get
601 * here often
602 */
603 do_each_thread(g, c) {
604 if (c->mm == mm)
605 goto assign_new_owner;
606 } while_each_thread(g, c);
607
608 read_unlock(&tasklist_lock);
31a78f23
BS
609 /*
610 * We found no owner yet mm_users > 1: this implies that we are
611 * most likely racing with swapoff (try_to_unuse()) or /proc or
e5991371 612 * ptrace or page migration (get_task_mm()). Mark owner as NULL.
31a78f23 613 */
31a78f23 614 mm->owner = NULL;
cf475ad2
BS
615 return;
616
617assign_new_owner:
618 BUG_ON(c == p);
619 get_task_struct(c);
620 /*
621 * The task_lock protects c->mm from changing.
622 * We always want mm->owner->mm == mm
623 */
624 task_lock(c);
e5991371
HD
625 /*
626 * Delay read_unlock() till we have the task_lock()
627 * to ensure that c does not slip away underneath us
628 */
629 read_unlock(&tasklist_lock);
cf475ad2
BS
630 if (c->mm != mm) {
631 task_unlock(c);
632 put_task_struct(c);
633 goto retry;
634 }
cf475ad2
BS
635 mm->owner = c;
636 task_unlock(c);
637 put_task_struct(c);
638}
639#endif /* CONFIG_MM_OWNER */
640
1da177e4
LT
641/*
642 * Turn us into a lazy TLB process if we
643 * aren't already..
644 */
408b664a 645static void exit_mm(struct task_struct * tsk)
1da177e4
LT
646{
647 struct mm_struct *mm = tsk->mm;
b564daf8 648 struct core_state *core_state;
1da177e4
LT
649
650 mm_release(tsk, mm);
651 if (!mm)
652 return;
653 /*
654 * Serialize with any possible pending coredump.
999d9fc1 655 * We must hold mmap_sem around checking core_state
1da177e4 656 * and clearing tsk->mm. The core-inducing thread
999d9fc1 657 * will increment ->nr_threads for each thread in the
1da177e4
LT
658 * group with ->mm != NULL.
659 */
660 down_read(&mm->mmap_sem);
b564daf8
ON
661 core_state = mm->core_state;
662 if (core_state) {
663 struct core_thread self;
1da177e4 664 up_read(&mm->mmap_sem);
1da177e4 665
b564daf8
ON
666 self.task = tsk;
667 self.next = xchg(&core_state->dumper.next, &self);
668 /*
669 * Implies mb(), the result of xchg() must be visible
670 * to core_state->dumper.
671 */
672 if (atomic_dec_and_test(&core_state->nr_threads))
673 complete(&core_state->startup);
1da177e4 674
a94e2d40
ON
675 for (;;) {
676 set_task_state(tsk, TASK_UNINTERRUPTIBLE);
677 if (!self.task) /* see coredump_finish() */
678 break;
679 schedule();
680 }
681 __set_task_state(tsk, TASK_RUNNING);
1da177e4
LT
682 down_read(&mm->mmap_sem);
683 }
684 atomic_inc(&mm->mm_count);
125e1874 685 BUG_ON(mm != tsk->active_mm);
1da177e4
LT
686 /* more a memory barrier than a real lock */
687 task_lock(tsk);
688 tsk->mm = NULL;
689 up_read(&mm->mmap_sem);
690 enter_lazy_tlb(mm, current);
0c1eecfb
RW
691 /* We don't want this task to be frozen prematurely */
692 clear_freeze_flag(tsk);
1da177e4 693 task_unlock(tsk);
cf475ad2 694 mm_update_next_owner(mm);
1da177e4
LT
695 mmput(mm);
696}
697
1da177e4
LT
698/*
699 * When we die, we re-parent all our children.
700 * Try to give them to another thread in our thread
701 * group, and if no such member exists, give it to
84d73786
SB
702 * the child reaper process (ie "init") in our pid
703 * space.
1da177e4 704 */
950bbabb 705static struct task_struct *find_new_reaper(struct task_struct *father)
1da177e4 706{
950bbabb
ON
707 struct pid_namespace *pid_ns = task_active_pid_ns(father);
708 struct task_struct *thread;
1da177e4 709
950bbabb
ON
710 thread = father;
711 while_each_thread(father, thread) {
712 if (thread->flags & PF_EXITING)
713 continue;
714 if (unlikely(pid_ns->child_reaper == father))
715 pid_ns->child_reaper = thread;
716 return thread;
717 }
1da177e4 718
950bbabb
ON
719 if (unlikely(pid_ns->child_reaper == father)) {
720 write_unlock_irq(&tasklist_lock);
721 if (unlikely(pid_ns == &init_pid_ns))
722 panic("Attempted to kill init!");
1da177e4 723
950bbabb
ON
724 zap_pid_ns_processes(pid_ns);
725 write_lock_irq(&tasklist_lock);
1da177e4 726 /*
950bbabb
ON
727 * We can not clear ->child_reaper or leave it alone.
728 * There may by stealth EXIT_DEAD tasks on ->children,
729 * forget_original_parent() must move them somewhere.
1da177e4 730 */
950bbabb 731 pid_ns->child_reaper = init_pid_ns.child_reaper;
1da177e4 732 }
762a24be 733
950bbabb
ON
734 return pid_ns->child_reaper;
735}
736
5dfc80be
ON
737/*
738* Any that need to be release_task'd are put on the @dead list.
739 */
740static void reparent_thread(struct task_struct *father, struct task_struct *p,
741 struct list_head *dead)
742{
743 if (p->pdeath_signal)
744 group_send_sig_info(p->pdeath_signal, SEND_SIG_NOINFO, p);
745
746 list_move_tail(&p->sibling, &p->real_parent->children);
747
748 if (task_detached(p))
749 return;
750 /*
751 * If this is a threaded reparent there is no need to
752 * notify anyone anything has happened.
753 */
754 if (same_thread_group(p->real_parent, father))
755 return;
756
757 /* We don't want people slaying init. */
758 p->exit_signal = SIGCHLD;
759
760 /* If it has exited notify the new parent about this child's death. */
5cb11446 761 if (!task_ptrace(p) &&
5dfc80be
ON
762 p->exit_state == EXIT_ZOMBIE && thread_group_empty(p)) {
763 do_notify_parent(p, p->exit_signal);
764 if (task_detached(p)) {
765 p->exit_state = EXIT_DEAD;
766 list_move_tail(&p->sibling, dead);
767 }
768 }
769
770 kill_orphaned_pgrp(p, father);
771}
772
762a24be 773static void forget_original_parent(struct task_struct *father)
1da177e4 774{
950bbabb 775 struct task_struct *p, *n, *reaper;
5dfc80be 776 LIST_HEAD(dead_children);
762a24be 777
39c626ae
ON
778 exit_ptrace(father);
779
762a24be 780 write_lock_irq(&tasklist_lock);
950bbabb 781 reaper = find_new_reaper(father);
f470021a 782
03ff1797 783 list_for_each_entry_safe(p, n, &father->children, sibling) {
84eb646b 784 p->real_parent = reaper;
f470021a 785 if (p->parent == father) {
5cb11446 786 BUG_ON(task_ptrace(p));
f470021a
RM
787 p->parent = p->real_parent;
788 }
5dfc80be 789 reparent_thread(father, p, &dead_children);
1da177e4 790 }
762a24be 791 write_unlock_irq(&tasklist_lock);
5dfc80be 792
762a24be 793 BUG_ON(!list_empty(&father->children));
762a24be 794
5dfc80be
ON
795 list_for_each_entry_safe(p, n, &dead_children, sibling) {
796 list_del_init(&p->sibling);
39c626ae
ON
797 release_task(p);
798 }
1da177e4
LT
799}
800
801/*
802 * Send signals to all our closest relatives so that they know
803 * to properly mourn us..
804 */
821c7de7 805static void exit_notify(struct task_struct *tsk, int group_dead)
1da177e4 806{
2b2a1ff6
RM
807 int signal;
808 void *cookie;
1da177e4 809
1da177e4
LT
810 /*
811 * This does two things:
812 *
813 * A. Make init inherit all the child processes
814 * B. Check to see if any process groups have become orphaned
815 * as a result of our exiting, and if they have any stopped
816 * jobs, send them a SIGHUP and then a SIGCONT. (POSIX 3.2.2.2)
817 */
762a24be 818 forget_original_parent(tsk);
2e4a7072 819 exit_task_namespaces(tsk);
1da177e4 820
762a24be 821 write_lock_irq(&tasklist_lock);
821c7de7
ON
822 if (group_dead)
823 kill_orphaned_pgrp(tsk->group_leader, NULL);
1da177e4 824
24728448 825 /* Let father know we died
1da177e4
LT
826 *
827 * Thread signals are configurable, but you aren't going to use
d4c5e41f 828 * that to send signals to arbitary processes.
1da177e4
LT
829 * That stops right now.
830 *
831 * If the parent exec id doesn't match the exec id we saved
832 * when we started then we know the parent has changed security
833 * domain.
834 *
835 * If our self_exec id doesn't match our parent_exec_id then
836 * we have changed execution domain as these two values started
837 * the same after a fork.
1da177e4 838 */
d839fd4d 839 if (tsk->exit_signal != SIGCHLD && !task_detached(tsk) &&
f49ee505 840 (tsk->parent_exec_id != tsk->real_parent->self_exec_id ||
432870da 841 tsk->self_exec_id != tsk->parent_exec_id))
1da177e4
LT
842 tsk->exit_signal = SIGCHLD;
843
2b2a1ff6 844 signal = tracehook_notify_death(tsk, &cookie, group_dead);
5c7edcd7 845 if (signal >= 0)
2b2a1ff6 846 signal = do_notify_parent(tsk, signal);
1da177e4 847
5c7edcd7 848 tsk->exit_state = signal == DEATH_REAP ? EXIT_DEAD : EXIT_ZOMBIE;
1da177e4 849
2800d8d1 850 /* mt-exec, de_thread() is waiting for us */
6db840fa 851 if (thread_group_leader(tsk) &&
2633f0e5
SV
852 tsk->signal->group_exit_task &&
853 tsk->signal->notify_count < 0)
6db840fa
ON
854 wake_up_process(tsk->signal->group_exit_task);
855
1da177e4
LT
856 write_unlock_irq(&tasklist_lock);
857
2b2a1ff6
RM
858 tracehook_report_death(tsk, signal, cookie, group_dead);
859
1da177e4 860 /* If the process is dead, release it - nobody will wait for it */
5c7edcd7 861 if (signal == DEATH_REAP)
1da177e4 862 release_task(tsk);
1da177e4
LT
863}
864
e18eecb8
JD
865#ifdef CONFIG_DEBUG_STACK_USAGE
866static void check_stack_usage(void)
867{
868 static DEFINE_SPINLOCK(low_water_lock);
869 static int lowest_to_date = THREAD_SIZE;
e18eecb8
JD
870 unsigned long free;
871
7c9f8861 872 free = stack_not_used(current);
e18eecb8
JD
873
874 if (free >= lowest_to_date)
875 return;
876
877 spin_lock(&low_water_lock);
878 if (free < lowest_to_date) {
879 printk(KERN_WARNING "%s used greatest stack depth: %lu bytes "
880 "left\n",
881 current->comm, free);
882 lowest_to_date = free;
883 }
884 spin_unlock(&low_water_lock);
885}
886#else
887static inline void check_stack_usage(void) {}
888#endif
889
7ad5b3a5 890NORET_TYPE void do_exit(long code)
1da177e4
LT
891{
892 struct task_struct *tsk = current;
893 int group_dead;
894
895 profile_task_exit(tsk);
896
22e2c507
JA
897 WARN_ON(atomic_read(&tsk->fs_excl));
898
1da177e4
LT
899 if (unlikely(in_interrupt()))
900 panic("Aiee, killing interrupt handler!");
901 if (unlikely(!tsk->pid))
902 panic("Attempted to kill the idle task!");
1da177e4 903
30199f5a 904 tracehook_report_exit(&code);
1da177e4 905
e0e81739
DH
906 validate_creds_for_do_exit(tsk);
907
df164db5
AN
908 /*
909 * We're taking recursive faults here in do_exit. Safest is to just
910 * leave this task alone and wait for reboot.
911 */
912 if (unlikely(tsk->flags & PF_EXITING)) {
913 printk(KERN_ALERT
914 "Fixing recursive fault but reboot is needed!\n");
778e9a9c
AK
915 /*
916 * We can do this unlocked here. The futex code uses
917 * this flag just to verify whether the pi state
918 * cleanup has been done or not. In the worst case it
919 * loops once more. We pretend that the cleanup was
920 * done as there is no way to return. Either the
921 * OWNER_DIED bit is set by now or we push the blocked
922 * task into the wait for ever nirwana as well.
923 */
924 tsk->flags |= PF_EXITPIDONE;
df164db5
AN
925 set_current_state(TASK_UNINTERRUPTIBLE);
926 schedule();
927 }
928
3aa551c9
TG
929 exit_irq_thread();
930
d12619b5 931 exit_signals(tsk); /* sets PF_EXITING */
778e9a9c
AK
932 /*
933 * tsk->flags are checked in the futex code to protect against
934 * an exiting task cleaning up the robust pi futexes.
935 */
d2ee7198
ON
936 smp_mb();
937 spin_unlock_wait(&tsk->pi_lock);
1da177e4 938
1da177e4
LT
939 if (unlikely(in_atomic()))
940 printk(KERN_INFO "note: %s[%d] exited with preempt_count %d\n",
ba25f9dc 941 current->comm, task_pid_nr(current),
1da177e4
LT
942 preempt_count());
943
944 acct_update_integrals(tsk);
901608d9 945
1da177e4 946 group_dead = atomic_dec_and_test(&tsk->signal->live);
c3068951 947 if (group_dead) {
778e9a9c 948 hrtimer_cancel(&tsk->signal->real_timer);
25f407f0 949 exit_itimers(tsk->signal);
c3068951 950 }
f6ec29a4 951 acct_collect(code, group_dead);
522ed776
MT
952 if (group_dead)
953 tty_audit_exit();
fa84cb93
AV
954 if (unlikely(tsk->audit_context))
955 audit_free(tsk);
115085ea 956
f2ab6d88 957 tsk->exit_code = code;
115085ea 958 taskstats_exit(tsk, group_dead);
c757249a 959
1da177e4
LT
960 exit_mm(tsk);
961
0e464814 962 if (group_dead)
f6ec29a4 963 acct_process();
0a16b607
MD
964 trace_sched_process_exit(tsk);
965
1da177e4 966 exit_sem(tsk);
1ec7f1dd
AV
967 exit_files(tsk);
968 exit_fs(tsk);
e18eecb8 969 check_stack_usage();
1da177e4 970 exit_thread();
b4f48b63 971 cgroup_exit(tsk, 1);
1da177e4
LT
972
973 if (group_dead && tsk->signal->leader)
974 disassociate_ctty(1);
975
a1261f54 976 module_put(task_thread_info(tsk)->exec_domain->module);
1da177e4
LT
977 if (tsk->binfmt)
978 module_put(tsk->binfmt->module);
979
9f46080c 980 proc_exit_connector(tsk);
33b2fb30
IM
981
982 /*
983 * Flush inherited counters to the parent - before the parent
984 * gets woken up by child-exit notifications.
985 */
cdd6c482 986 perf_event_exit_task(tsk);
33b2fb30 987
821c7de7 988 exit_notify(tsk, group_dead);
1da177e4 989#ifdef CONFIG_NUMA
f0be3d32 990 mpol_put(tsk->mempolicy);
1da177e4
LT
991 tsk->mempolicy = NULL;
992#endif
42b2dd0a 993#ifdef CONFIG_FUTEX
c87e2837
IM
994 if (unlikely(!list_empty(&tsk->pi_state_list)))
995 exit_pi_state_list(tsk);
996 if (unlikely(current->pi_state_cache))
997 kfree(current->pi_state_cache);
42b2dd0a 998#endif
de5097c2 999 /*
9a11b49a 1000 * Make sure we are holding no locks:
de5097c2 1001 */
9a11b49a 1002 debug_check_no_locks_held(tsk);
778e9a9c
AK
1003 /*
1004 * We can do this unlocked here. The futex code uses this flag
1005 * just to verify whether the pi state cleanup has been done
1006 * or not. In the worst case it loops once more.
1007 */
1008 tsk->flags |= PF_EXITPIDONE;
1da177e4 1009
afc847b7
AV
1010 if (tsk->io_context)
1011 exit_io_context();
1012
b92ce558
JA
1013 if (tsk->splice_pipe)
1014 __free_pipe_info(tsk->splice_pipe);
1015
e0e81739
DH
1016 validate_creds_for_do_exit(tsk);
1017
7407251a 1018 preempt_disable();
f41d911f 1019 exit_rcu();
55a101f8 1020 /* causes final put_task_struct in finish_task_switch(). */
c394cc9f 1021 tsk->state = TASK_DEAD;
1da177e4
LT
1022 schedule();
1023 BUG();
1024 /* Avoid "noreturn function does return". */
54306cf0
AC
1025 for (;;)
1026 cpu_relax(); /* For when BUG is null */
1da177e4
LT
1027}
1028
012914da
RA
1029EXPORT_SYMBOL_GPL(do_exit);
1030
1da177e4
LT
1031NORET_TYPE void complete_and_exit(struct completion *comp, long code)
1032{
1033 if (comp)
1034 complete(comp);
55a101f8 1035
1da177e4
LT
1036 do_exit(code);
1037}
1038
1039EXPORT_SYMBOL(complete_and_exit);
1040
754fe8d2 1041SYSCALL_DEFINE1(exit, int, error_code)
1da177e4
LT
1042{
1043 do_exit((error_code&0xff)<<8);
1044}
1045
1da177e4
LT
1046/*
1047 * Take down every thread in the group. This is called by fatal signals
1048 * as well as by sys_exit_group (below).
1049 */
1050NORET_TYPE void
1051do_group_exit(int exit_code)
1052{
bfc4b089
ON
1053 struct signal_struct *sig = current->signal;
1054
1da177e4
LT
1055 BUG_ON(exit_code & 0x80); /* core dumps don't get here */
1056
bfc4b089
ON
1057 if (signal_group_exit(sig))
1058 exit_code = sig->group_exit_code;
1da177e4 1059 else if (!thread_group_empty(current)) {
1da177e4 1060 struct sighand_struct *const sighand = current->sighand;
1da177e4 1061 spin_lock_irq(&sighand->siglock);
ed5d2cac 1062 if (signal_group_exit(sig))
1da177e4
LT
1063 /* Another thread got here before we took the lock. */
1064 exit_code = sig->group_exit_code;
1065 else {
1da177e4 1066 sig->group_exit_code = exit_code;
ed5d2cac 1067 sig->flags = SIGNAL_GROUP_EXIT;
1da177e4
LT
1068 zap_other_threads(current);
1069 }
1070 spin_unlock_irq(&sighand->siglock);
1da177e4
LT
1071 }
1072
1073 do_exit(exit_code);
1074 /* NOTREACHED */
1075}
1076
1077/*
1078 * this kills every thread in the thread group. Note that any externally
1079 * wait4()-ing process will get the correct exit code - even if this
1080 * thread is not the thread group leader.
1081 */
754fe8d2 1082SYSCALL_DEFINE1(exit_group, int, error_code)
1da177e4
LT
1083{
1084 do_group_exit((error_code & 0xff) << 8);
2ed7c03e
HC
1085 /* NOTREACHED */
1086 return 0;
1da177e4
LT
1087}
1088
9e8ae01d
ON
1089struct wait_opts {
1090 enum pid_type wo_type;
9e8ae01d 1091 int wo_flags;
e1eb1ebc 1092 struct pid *wo_pid;
9e8ae01d
ON
1093
1094 struct siginfo __user *wo_info;
1095 int __user *wo_stat;
1096 struct rusage __user *wo_rusage;
1097
1098 int notask_error;
1099};
1100
161550d7
EB
1101static struct pid *task_pid_type(struct task_struct *task, enum pid_type type)
1102{
1103 struct pid *pid = NULL;
1104 if (type == PIDTYPE_PID)
1105 pid = task->pids[type].pid;
1106 else if (type < PIDTYPE_MAX)
1107 pid = task->group_leader->pids[type].pid;
1108 return pid;
1109}
1110
9e8ae01d 1111static int eligible_child(struct wait_opts *wo, struct task_struct *p)
1da177e4 1112{
73243284
RM
1113 int err;
1114
9e8ae01d
ON
1115 if (wo->wo_type < PIDTYPE_MAX) {
1116 if (task_pid_type(p, wo->wo_type) != wo->wo_pid)
1da177e4
LT
1117 return 0;
1118 }
1119
1da177e4
LT
1120 /* Wait for all children (clone and not) if __WALL is set;
1121 * otherwise, wait for clone children *only* if __WCLONE is
1122 * set; otherwise, wait for non-clone children *only*. (Note:
1123 * A "clone" child here is one that reports to its parent
1124 * using a signal other than SIGCHLD.) */
9e8ae01d
ON
1125 if (((p->exit_signal != SIGCHLD) ^ !!(wo->wo_flags & __WCLONE))
1126 && !(wo->wo_flags & __WALL))
1da177e4 1127 return 0;
1da177e4 1128
73243284 1129 err = security_task_wait(p);
14dd0b81
RM
1130 if (err)
1131 return err;
1da177e4 1132
14dd0b81 1133 return 1;
1da177e4
LT
1134}
1135
9e8ae01d
ON
1136static int wait_noreap_copyout(struct wait_opts *wo, struct task_struct *p,
1137 pid_t pid, uid_t uid, int why, int status)
1da177e4 1138{
9e8ae01d
ON
1139 struct siginfo __user *infop;
1140 int retval = wo->wo_rusage
1141 ? getrusage(p, RUSAGE_BOTH, wo->wo_rusage) : 0;
36c8b586 1142
1da177e4 1143 put_task_struct(p);
9e8ae01d 1144 infop = wo->wo_info;
1da177e4
LT
1145 if (!retval)
1146 retval = put_user(SIGCHLD, &infop->si_signo);
1147 if (!retval)
1148 retval = put_user(0, &infop->si_errno);
1149 if (!retval)
1150 retval = put_user((short)why, &infop->si_code);
1151 if (!retval)
1152 retval = put_user(pid, &infop->si_pid);
1153 if (!retval)
1154 retval = put_user(uid, &infop->si_uid);
1155 if (!retval)
1156 retval = put_user(status, &infop->si_status);
1157 if (!retval)
1158 retval = pid;
1159 return retval;
1160}
1161
1162/*
1163 * Handle sys_wait4 work for one task in state EXIT_ZOMBIE. We hold
1164 * read_lock(&tasklist_lock) on entry. If we return zero, we still hold
1165 * the lock and this task is uninteresting. If we return nonzero, we have
1166 * released the lock and the system call should return.
1167 */
9e8ae01d 1168static int wait_task_zombie(struct wait_opts *wo, struct task_struct *p)
1da177e4
LT
1169{
1170 unsigned long state;
2f4e6e2a 1171 int retval, status, traced;
6c5f3e7b 1172 pid_t pid = task_pid_vnr(p);
c69e8d9c 1173 uid_t uid = __task_cred(p)->uid;
9e8ae01d 1174 struct siginfo __user *infop;
1da177e4 1175
9e8ae01d 1176 if (!likely(wo->wo_flags & WEXITED))
98abed02
RM
1177 return 0;
1178
9e8ae01d 1179 if (unlikely(wo->wo_flags & WNOWAIT)) {
1da177e4
LT
1180 int exit_code = p->exit_code;
1181 int why, status;
1182
1da177e4
LT
1183 get_task_struct(p);
1184 read_unlock(&tasklist_lock);
1185 if ((exit_code & 0x7f) == 0) {
1186 why = CLD_EXITED;
1187 status = exit_code >> 8;
1188 } else {
1189 why = (exit_code & 0x80) ? CLD_DUMPED : CLD_KILLED;
1190 status = exit_code & 0x7f;
1191 }
9e8ae01d 1192 return wait_noreap_copyout(wo, p, pid, uid, why, status);
1da177e4
LT
1193 }
1194
1195 /*
1196 * Try to move the task's state to DEAD
1197 * only one thread is allowed to do this:
1198 */
1199 state = xchg(&p->exit_state, EXIT_DEAD);
1200 if (state != EXIT_ZOMBIE) {
1201 BUG_ON(state != EXIT_DEAD);
1202 return 0;
1203 }
1da177e4 1204
53b6f9fb 1205 traced = ptrace_reparented(p);
befca967
ON
1206 /*
1207 * It can be ptraced but not reparented, check
1208 * !task_detached() to filter out sub-threads.
1209 */
1210 if (likely(!traced) && likely(!task_detached(p))) {
3795e161
JJ
1211 struct signal_struct *psig;
1212 struct signal_struct *sig;
1213
1da177e4
LT
1214 /*
1215 * The resource counters for the group leader are in its
1216 * own task_struct. Those for dead threads in the group
1217 * are in its signal_struct, as are those for the child
1218 * processes it has previously reaped. All these
1219 * accumulate in the parent's signal_struct c* fields.
1220 *
1221 * We don't bother to take a lock here to protect these
1222 * p->signal fields, because they are only touched by
1223 * __exit_signal, which runs with tasklist_lock
1224 * write-locked anyway, and so is excluded here. We do
d1e98f42 1225 * need to protect the access to parent->signal fields,
1da177e4
LT
1226 * as other threads in the parent group can be right
1227 * here reaping other children at the same time.
1228 */
d1e98f42
ON
1229 spin_lock_irq(&p->real_parent->sighand->siglock);
1230 psig = p->real_parent->signal;
3795e161
JJ
1231 sig = p->signal;
1232 psig->cutime =
1233 cputime_add(psig->cutime,
77d1ef79
ON
1234 cputime_add(p->utime,
1235 cputime_add(sig->utime,
1236 sig->cutime)));
3795e161
JJ
1237 psig->cstime =
1238 cputime_add(psig->cstime,
77d1ef79
ON
1239 cputime_add(p->stime,
1240 cputime_add(sig->stime,
1241 sig->cstime)));
9ac52315
LV
1242 psig->cgtime =
1243 cputime_add(psig->cgtime,
1244 cputime_add(p->gtime,
1245 cputime_add(sig->gtime,
1246 sig->cgtime)));
3795e161
JJ
1247 psig->cmin_flt +=
1248 p->min_flt + sig->min_flt + sig->cmin_flt;
1249 psig->cmaj_flt +=
1250 p->maj_flt + sig->maj_flt + sig->cmaj_flt;
1251 psig->cnvcsw +=
1252 p->nvcsw + sig->nvcsw + sig->cnvcsw;
1253 psig->cnivcsw +=
1254 p->nivcsw + sig->nivcsw + sig->cnivcsw;
6eaeeaba
ED
1255 psig->cinblock +=
1256 task_io_get_inblock(p) +
1257 sig->inblock + sig->cinblock;
1258 psig->coublock +=
1259 task_io_get_oublock(p) +
1260 sig->oublock + sig->coublock;
5995477a
AR
1261 task_io_accounting_add(&psig->ioac, &p->ioac);
1262 task_io_accounting_add(&psig->ioac, &sig->ioac);
d1e98f42 1263 spin_unlock_irq(&p->real_parent->sighand->siglock);
1da177e4
LT
1264 }
1265
1266 /*
1267 * Now we are sure this task is interesting, and no other
1268 * thread can reap it because we set its state to EXIT_DEAD.
1269 */
1270 read_unlock(&tasklist_lock);
1271
9e8ae01d
ON
1272 retval = wo->wo_rusage
1273 ? getrusage(p, RUSAGE_BOTH, wo->wo_rusage) : 0;
1da177e4
LT
1274 status = (p->signal->flags & SIGNAL_GROUP_EXIT)
1275 ? p->signal->group_exit_code : p->exit_code;
9e8ae01d
ON
1276 if (!retval && wo->wo_stat)
1277 retval = put_user(status, wo->wo_stat);
1278
1279 infop = wo->wo_info;
1da177e4
LT
1280 if (!retval && infop)
1281 retval = put_user(SIGCHLD, &infop->si_signo);
1282 if (!retval && infop)
1283 retval = put_user(0, &infop->si_errno);
1284 if (!retval && infop) {
1285 int why;
1286
1287 if ((status & 0x7f) == 0) {
1288 why = CLD_EXITED;
1289 status >>= 8;
1290 } else {
1291 why = (status & 0x80) ? CLD_DUMPED : CLD_KILLED;
1292 status &= 0x7f;
1293 }
1294 retval = put_user((short)why, &infop->si_code);
1295 if (!retval)
1296 retval = put_user(status, &infop->si_status);
1297 }
1298 if (!retval && infop)
3a515e4a 1299 retval = put_user(pid, &infop->si_pid);
1da177e4 1300 if (!retval && infop)
c69e8d9c 1301 retval = put_user(uid, &infop->si_uid);
2f4e6e2a 1302 if (!retval)
3a515e4a 1303 retval = pid;
2f4e6e2a
ON
1304
1305 if (traced) {
1da177e4 1306 write_lock_irq(&tasklist_lock);
2f4e6e2a
ON
1307 /* We dropped tasklist, ptracer could die and untrace */
1308 ptrace_unlink(p);
1309 /*
1310 * If this is not a detached task, notify the parent.
1311 * If it's still not detached after that, don't release
1312 * it now.
1313 */
d839fd4d 1314 if (!task_detached(p)) {
2f4e6e2a 1315 do_notify_parent(p, p->exit_signal);
d839fd4d 1316 if (!task_detached(p)) {
2f4e6e2a
ON
1317 p->exit_state = EXIT_ZOMBIE;
1318 p = NULL;
1da177e4
LT
1319 }
1320 }
1321 write_unlock_irq(&tasklist_lock);
1322 }
1323 if (p != NULL)
1324 release_task(p);
2f4e6e2a 1325
1da177e4
LT
1326 return retval;
1327}
1328
90bc8d8b
ON
1329static int *task_stopped_code(struct task_struct *p, bool ptrace)
1330{
1331 if (ptrace) {
1332 if (task_is_stopped_or_traced(p))
1333 return &p->exit_code;
1334 } else {
1335 if (p->signal->flags & SIGNAL_STOP_STOPPED)
1336 return &p->signal->group_exit_code;
1337 }
1338 return NULL;
1339}
1340
1da177e4
LT
1341/*
1342 * Handle sys_wait4 work for one task in state TASK_STOPPED. We hold
1343 * read_lock(&tasklist_lock) on entry. If we return zero, we still hold
1344 * the lock and this task is uninteresting. If we return nonzero, we have
1345 * released the lock and the system call should return.
1346 */
9e8ae01d
ON
1347static int wait_task_stopped(struct wait_opts *wo,
1348 int ptrace, struct task_struct *p)
1da177e4 1349{
9e8ae01d 1350 struct siginfo __user *infop;
90bc8d8b 1351 int retval, exit_code, *p_code, why;
ee7c82da 1352 uid_t uid = 0; /* unneeded, required by compiler */
c8950783 1353 pid_t pid;
1da177e4 1354
47918025
ON
1355 /*
1356 * Traditionally we see ptrace'd stopped tasks regardless of options.
1357 */
9e8ae01d 1358 if (!ptrace && !(wo->wo_flags & WUNTRACED))
98abed02
RM
1359 return 0;
1360
ee7c82da
ON
1361 exit_code = 0;
1362 spin_lock_irq(&p->sighand->siglock);
1363
90bc8d8b
ON
1364 p_code = task_stopped_code(p, ptrace);
1365 if (unlikely(!p_code))
ee7c82da
ON
1366 goto unlock_sig;
1367
90bc8d8b 1368 exit_code = *p_code;
ee7c82da
ON
1369 if (!exit_code)
1370 goto unlock_sig;
1371
9e8ae01d 1372 if (!unlikely(wo->wo_flags & WNOWAIT))
90bc8d8b 1373 *p_code = 0;
ee7c82da 1374
c69e8d9c
DH
1375 /* don't need the RCU readlock here as we're holding a spinlock */
1376 uid = __task_cred(p)->uid;
ee7c82da
ON
1377unlock_sig:
1378 spin_unlock_irq(&p->sighand->siglock);
1379 if (!exit_code)
1da177e4
LT
1380 return 0;
1381
1382 /*
1383 * Now we are pretty sure this task is interesting.
1384 * Make sure it doesn't get reaped out from under us while we
1385 * give up the lock and then examine it below. We don't want to
1386 * keep holding onto the tasklist_lock while we call getrusage and
1387 * possibly take page faults for user memory.
1388 */
1389 get_task_struct(p);
6c5f3e7b 1390 pid = task_pid_vnr(p);
f470021a 1391 why = ptrace ? CLD_TRAPPED : CLD_STOPPED;
1da177e4
LT
1392 read_unlock(&tasklist_lock);
1393
9e8ae01d
ON
1394 if (unlikely(wo->wo_flags & WNOWAIT))
1395 return wait_noreap_copyout(wo, p, pid, uid, why, exit_code);
1396
1397 retval = wo->wo_rusage
1398 ? getrusage(p, RUSAGE_BOTH, wo->wo_rusage) : 0;
1399 if (!retval && wo->wo_stat)
1400 retval = put_user((exit_code << 8) | 0x7f, wo->wo_stat);
1da177e4 1401
9e8ae01d 1402 infop = wo->wo_info;
1da177e4
LT
1403 if (!retval && infop)
1404 retval = put_user(SIGCHLD, &infop->si_signo);
1405 if (!retval && infop)
1406 retval = put_user(0, &infop->si_errno);
1407 if (!retval && infop)
6efcae46 1408 retval = put_user((short)why, &infop->si_code);
1da177e4
LT
1409 if (!retval && infop)
1410 retval = put_user(exit_code, &infop->si_status);
1411 if (!retval && infop)
c8950783 1412 retval = put_user(pid, &infop->si_pid);
1da177e4 1413 if (!retval && infop)
ee7c82da 1414 retval = put_user(uid, &infop->si_uid);
1da177e4 1415 if (!retval)
c8950783 1416 retval = pid;
1da177e4
LT
1417 put_task_struct(p);
1418
1419 BUG_ON(!retval);
1420 return retval;
1421}
1422
1423/*
1424 * Handle do_wait work for one task in a live, non-stopped state.
1425 * read_lock(&tasklist_lock) on entry. If we return zero, we still hold
1426 * the lock and this task is uninteresting. If we return nonzero, we have
1427 * released the lock and the system call should return.
1428 */
9e8ae01d 1429static int wait_task_continued(struct wait_opts *wo, struct task_struct *p)
1da177e4
LT
1430{
1431 int retval;
1432 pid_t pid;
1433 uid_t uid;
1434
9e8ae01d 1435 if (!unlikely(wo->wo_flags & WCONTINUED))
98abed02
RM
1436 return 0;
1437
1da177e4
LT
1438 if (!(p->signal->flags & SIGNAL_STOP_CONTINUED))
1439 return 0;
1440
1441 spin_lock_irq(&p->sighand->siglock);
1442 /* Re-check with the lock held. */
1443 if (!(p->signal->flags & SIGNAL_STOP_CONTINUED)) {
1444 spin_unlock_irq(&p->sighand->siglock);
1445 return 0;
1446 }
9e8ae01d 1447 if (!unlikely(wo->wo_flags & WNOWAIT))
1da177e4 1448 p->signal->flags &= ~SIGNAL_STOP_CONTINUED;
c69e8d9c 1449 uid = __task_cred(p)->uid;
1da177e4
LT
1450 spin_unlock_irq(&p->sighand->siglock);
1451
6c5f3e7b 1452 pid = task_pid_vnr(p);
1da177e4
LT
1453 get_task_struct(p);
1454 read_unlock(&tasklist_lock);
1455
9e8ae01d
ON
1456 if (!wo->wo_info) {
1457 retval = wo->wo_rusage
1458 ? getrusage(p, RUSAGE_BOTH, wo->wo_rusage) : 0;
1da177e4 1459 put_task_struct(p);
9e8ae01d
ON
1460 if (!retval && wo->wo_stat)
1461 retval = put_user(0xffff, wo->wo_stat);
1da177e4 1462 if (!retval)
3a515e4a 1463 retval = pid;
1da177e4 1464 } else {
9e8ae01d
ON
1465 retval = wait_noreap_copyout(wo, p, pid, uid,
1466 CLD_CONTINUED, SIGCONT);
1da177e4
LT
1467 BUG_ON(retval == 0);
1468 }
1469
1470 return retval;
1471}
1472
98abed02
RM
1473/*
1474 * Consider @p for a wait by @parent.
1475 *
9e8ae01d 1476 * -ECHILD should be in ->notask_error before the first call.
98abed02
RM
1477 * Returns nonzero for a final return, when we have unlocked tasklist_lock.
1478 * Returns zero if the search for a child should continue;
9e8ae01d 1479 * then ->notask_error is 0 if @p is an eligible child,
14dd0b81 1480 * or another error from security_task_wait(), or still -ECHILD.
98abed02 1481 */
9e8ae01d
ON
1482static int wait_consider_task(struct wait_opts *wo, struct task_struct *parent,
1483 int ptrace, struct task_struct *p)
98abed02 1484{
9e8ae01d 1485 int ret = eligible_child(wo, p);
14dd0b81 1486 if (!ret)
98abed02
RM
1487 return ret;
1488
14dd0b81
RM
1489 if (unlikely(ret < 0)) {
1490 /*
1491 * If we have not yet seen any eligible child,
1492 * then let this error code replace -ECHILD.
1493 * A permission error will give the user a clue
1494 * to look for security policy problems, rather
1495 * than for mysterious wait bugs.
1496 */
9e8ae01d
ON
1497 if (wo->notask_error)
1498 wo->notask_error = ret;
78a3d9d5 1499 return 0;
14dd0b81
RM
1500 }
1501
5cb11446 1502 if (likely(!ptrace) && unlikely(task_ptrace(p))) {
f470021a
RM
1503 /*
1504 * This child is hidden by ptrace.
1505 * We aren't allowed to see it now, but eventually we will.
1506 */
9e8ae01d 1507 wo->notask_error = 0;
f470021a
RM
1508 return 0;
1509 }
1510
98abed02
RM
1511 if (p->exit_state == EXIT_DEAD)
1512 return 0;
1513
1514 /*
1515 * We don't reap group leaders with subthreads.
1516 */
1517 if (p->exit_state == EXIT_ZOMBIE && !delay_group_leader(p))
9e8ae01d 1518 return wait_task_zombie(wo, p);
98abed02
RM
1519
1520 /*
1521 * It's stopped or running now, so it might
1522 * later continue, exit, or stop again.
1523 */
9e8ae01d 1524 wo->notask_error = 0;
98abed02 1525
90bc8d8b 1526 if (task_stopped_code(p, ptrace))
9e8ae01d 1527 return wait_task_stopped(wo, ptrace, p);
98abed02 1528
9e8ae01d 1529 return wait_task_continued(wo, p);
98abed02
RM
1530}
1531
1532/*
1533 * Do the work of do_wait() for one thread in the group, @tsk.
1534 *
9e8ae01d 1535 * -ECHILD should be in ->notask_error before the first call.
98abed02
RM
1536 * Returns nonzero for a final return, when we have unlocked tasklist_lock.
1537 * Returns zero if the search for a child should continue; then
9e8ae01d 1538 * ->notask_error is 0 if there were any eligible children,
14dd0b81 1539 * or another error from security_task_wait(), or still -ECHILD.
98abed02 1540 */
9e8ae01d 1541static int do_wait_thread(struct wait_opts *wo, struct task_struct *tsk)
98abed02
RM
1542{
1543 struct task_struct *p;
1544
1545 list_for_each_entry(p, &tsk->children, sibling) {
f470021a
RM
1546 /*
1547 * Do not consider detached threads.
1548 */
1549 if (!task_detached(p)) {
9e8ae01d 1550 int ret = wait_consider_task(wo, tsk, 0, p);
f470021a
RM
1551 if (ret)
1552 return ret;
1553 }
98abed02
RM
1554 }
1555
1556 return 0;
1557}
1558
9e8ae01d 1559static int ptrace_do_wait(struct wait_opts *wo, struct task_struct *tsk)
98abed02
RM
1560{
1561 struct task_struct *p;
1562
f470021a 1563 list_for_each_entry(p, &tsk->ptraced, ptrace_entry) {
9e8ae01d 1564 int ret = wait_consider_task(wo, tsk, 1, p);
f470021a 1565 if (ret)
98abed02 1566 return ret;
98abed02
RM
1567 }
1568
1569 return 0;
1570}
1571
9e8ae01d 1572static long do_wait(struct wait_opts *wo)
1da177e4
LT
1573{
1574 DECLARE_WAITQUEUE(wait, current);
1575 struct task_struct *tsk;
98abed02 1576 int retval;
1da177e4 1577
9e8ae01d 1578 trace_sched_process_wait(wo->wo_pid);
0a16b607 1579
1da177e4
LT
1580 add_wait_queue(&current->signal->wait_chldexit,&wait);
1581repeat:
98abed02
RM
1582 /*
1583 * If there is nothing that can match our critiera just get out.
9e8ae01d
ON
1584 * We will clear ->notask_error to zero if we see any child that
1585 * might later match our criteria, even if we are not able to reap
1586 * it yet.
98abed02 1587 */
64a16caf 1588 wo->notask_error = -ECHILD;
9e8ae01d
ON
1589 if ((wo->wo_type < PIDTYPE_MAX) &&
1590 (!wo->wo_pid || hlist_empty(&wo->wo_pid->tasks[wo->wo_type])))
64a16caf 1591 goto notask;
161550d7 1592
f95d39d1 1593 set_current_state(TASK_INTERRUPTIBLE);
1da177e4
LT
1594 read_lock(&tasklist_lock);
1595 tsk = current;
1596 do {
64a16caf
ON
1597 retval = do_wait_thread(wo, tsk);
1598 if (retval)
1599 goto end;
9e8ae01d 1600
64a16caf
ON
1601 retval = ptrace_do_wait(wo, tsk);
1602 if (retval)
98abed02 1603 goto end;
98abed02 1604
9e8ae01d 1605 if (wo->wo_flags & __WNOTHREAD)
1da177e4 1606 break;
a3f6dfb7 1607 } while_each_thread(current, tsk);
1da177e4 1608 read_unlock(&tasklist_lock);
f2cc3eb1 1609
64a16caf 1610notask:
9e8ae01d
ON
1611 retval = wo->notask_error;
1612 if (!retval && !(wo->wo_flags & WNOHANG)) {
1da177e4 1613 retval = -ERESTARTSYS;
98abed02
RM
1614 if (!signal_pending(current)) {
1615 schedule();
1616 goto repeat;
1617 }
1da177e4 1618 }
1da177e4 1619end:
f95d39d1 1620 __set_current_state(TASK_RUNNING);
1da177e4 1621 remove_wait_queue(&current->signal->wait_chldexit,&wait);
9e8ae01d
ON
1622 if (wo->wo_info) {
1623 struct siginfo __user *infop = wo->wo_info;
1624
1da177e4 1625 if (retval > 0)
9cbab810 1626 retval = 0;
1da177e4
LT
1627 else {
1628 /*
1629 * For a WNOHANG return, clear out all the fields
1630 * we would set so the user can easily tell the
1631 * difference.
1632 */
1633 if (!retval)
1634 retval = put_user(0, &infop->si_signo);
1635 if (!retval)
1636 retval = put_user(0, &infop->si_errno);
1637 if (!retval)
1638 retval = put_user(0, &infop->si_code);
1639 if (!retval)
1640 retval = put_user(0, &infop->si_pid);
1641 if (!retval)
1642 retval = put_user(0, &infop->si_uid);
1643 if (!retval)
1644 retval = put_user(0, &infop->si_status);
1645 }
1646 }
1647 return retval;
1648}
1649
17da2bd9
HC
1650SYSCALL_DEFINE5(waitid, int, which, pid_t, upid, struct siginfo __user *,
1651 infop, int, options, struct rusage __user *, ru)
1da177e4 1652{
9e8ae01d 1653 struct wait_opts wo;
161550d7
EB
1654 struct pid *pid = NULL;
1655 enum pid_type type;
1da177e4
LT
1656 long ret;
1657
1658 if (options & ~(WNOHANG|WNOWAIT|WEXITED|WSTOPPED|WCONTINUED))
1659 return -EINVAL;
1660 if (!(options & (WEXITED|WSTOPPED|WCONTINUED)))
1661 return -EINVAL;
1662
1663 switch (which) {
1664 case P_ALL:
161550d7 1665 type = PIDTYPE_MAX;
1da177e4
LT
1666 break;
1667 case P_PID:
161550d7
EB
1668 type = PIDTYPE_PID;
1669 if (upid <= 0)
1da177e4
LT
1670 return -EINVAL;
1671 break;
1672 case P_PGID:
161550d7
EB
1673 type = PIDTYPE_PGID;
1674 if (upid <= 0)
1da177e4 1675 return -EINVAL;
1da177e4
LT
1676 break;
1677 default:
1678 return -EINVAL;
1679 }
1680
161550d7
EB
1681 if (type < PIDTYPE_MAX)
1682 pid = find_get_pid(upid);
9e8ae01d
ON
1683
1684 wo.wo_type = type;
1685 wo.wo_pid = pid;
1686 wo.wo_flags = options;
1687 wo.wo_info = infop;
1688 wo.wo_stat = NULL;
1689 wo.wo_rusage = ru;
1690 ret = do_wait(&wo);
161550d7 1691 put_pid(pid);
1da177e4
LT
1692
1693 /* avoid REGPARM breakage on x86: */
54a01510 1694 asmlinkage_protect(5, ret, which, upid, infop, options, ru);
1da177e4
LT
1695 return ret;
1696}
1697
754fe8d2
HC
1698SYSCALL_DEFINE4(wait4, pid_t, upid, int __user *, stat_addr,
1699 int, options, struct rusage __user *, ru)
1da177e4 1700{
9e8ae01d 1701 struct wait_opts wo;
161550d7
EB
1702 struct pid *pid = NULL;
1703 enum pid_type type;
1da177e4
LT
1704 long ret;
1705
1706 if (options & ~(WNOHANG|WUNTRACED|WCONTINUED|
1707 __WNOTHREAD|__WCLONE|__WALL))
1708 return -EINVAL;
161550d7
EB
1709
1710 if (upid == -1)
1711 type = PIDTYPE_MAX;
1712 else if (upid < 0) {
1713 type = PIDTYPE_PGID;
1714 pid = find_get_pid(-upid);
1715 } else if (upid == 0) {
1716 type = PIDTYPE_PGID;
2ae448ef 1717 pid = get_task_pid(current, PIDTYPE_PGID);
161550d7
EB
1718 } else /* upid > 0 */ {
1719 type = PIDTYPE_PID;
1720 pid = find_get_pid(upid);
1721 }
1722
9e8ae01d
ON
1723 wo.wo_type = type;
1724 wo.wo_pid = pid;
1725 wo.wo_flags = options | WEXITED;
1726 wo.wo_info = NULL;
1727 wo.wo_stat = stat_addr;
1728 wo.wo_rusage = ru;
1729 ret = do_wait(&wo);
161550d7 1730 put_pid(pid);
1da177e4
LT
1731
1732 /* avoid REGPARM breakage on x86: */
54a01510 1733 asmlinkage_protect(4, ret, upid, stat_addr, options, ru);
1da177e4
LT
1734 return ret;
1735}
1736
1737#ifdef __ARCH_WANT_SYS_WAITPID
1738
1739/*
1740 * sys_waitpid() remains for compatibility. waitpid() should be
1741 * implemented by calling sys_wait4() from libc.a.
1742 */
17da2bd9 1743SYSCALL_DEFINE3(waitpid, pid_t, pid, int __user *, stat_addr, int, options)
1da177e4
LT
1744{
1745 return sys_wait4(pid, stat_addr, options, NULL);
1746}
1747
1748#endif