3 * Copyright (C) 1992 Krishna Balasubramanian
5 * Removed all the remaining kerneld mess
6 * Catch the -EFAULT stuff properly
7 * Use GFP_KERNEL for messages as in 1.2
8 * Fixed up the unchecked user space derefs
9 * Copyright (C) 1998 Alan Cox & Andi Kleen
11 * /proc/sysvipc/msg support (c) 1999 Dragos Acostachioaie <dragos@iname.com>
13 * mostly rewritten, threaded and wake-one semantics added
14 * MSGMAX limit removed, sysctl's added
15 * (c) 1999 Manfred Spraul <manfred@colorfullife.com>
17 * support for audit of ipc object properties and permission changes
18 * Dustin Kirkland <dustin.kirkland@us.ibm.com>
22 * Pavel Emelianov <xemul@openvz.org>
25 #include <linux/capability.h>
26 #include <linux/slab.h>
27 #include <linux/msg.h>
28 #include <linux/spinlock.h>
29 #include <linux/init.h>
31 #include <linux/proc_fs.h>
32 #include <linux/list.h>
33 #include <linux/security.h>
34 #include <linux/sched.h>
35 #include <linux/syscalls.h>
36 #include <linux/audit.h>
37 #include <linux/seq_file.h>
38 #include <linux/rwsem.h>
39 #include <linux/nsproxy.h>
40 #include <linux/ipc_namespace.h>
42 #include <asm/current.h>
43 #include <asm/uaccess.h>
47 * one msg_receiver structure for each sleeping receiver:
50 struct list_head r_list
;
51 struct task_struct
*r_tsk
;
57 struct msg_msg
*volatile r_msg
;
60 /* one msg_sender for each sleeping sender */
62 struct list_head list
;
63 struct task_struct
*tsk
;
67 #define SEARCH_EQUAL 2
68 #define SEARCH_NOTEQUAL 3
69 #define SEARCH_LESSEQUAL 4
71 #define msg_ids(ns) ((ns)->ids[IPC_MSG_IDS])
73 #define msg_unlock(msq) ipc_unlock(&(msq)->q_perm)
75 static void freeque(struct ipc_namespace
*, struct kern_ipc_perm
*);
76 static int newque(struct ipc_namespace
*, struct ipc_params
*);
78 static int sysvipc_msg_proc_show(struct seq_file
*s
, void *it
);
82 * Scale msgmni with the available lowmem size: the memory dedicated to msg
83 * queues should occupy at most 1/MSG_MEM_SCALE of lowmem.
84 * Also take into account the number of nsproxies created so far.
85 * This should be done staying within the (MSGMNI , IPCMNI/nr_ipc_ns) range.
87 static void recompute_msgmni(struct ipc_namespace
*ns
)
90 unsigned long allowed
;
94 allowed
= (((i
.totalram
- i
.totalhigh
) / MSG_MEM_SCALE
) * i
.mem_unit
)
96 nb_ns
= atomic_read(&nr_ipc_ns
);
99 if (allowed
< MSGMNI
) {
100 ns
->msg_ctlmni
= MSGMNI
;
104 if (allowed
> IPCMNI
/ nb_ns
) {
105 ns
->msg_ctlmni
= IPCMNI
/ nb_ns
;
109 ns
->msg_ctlmni
= allowed
;
113 printk(KERN_INFO
"msgmni has been set to %d for ipc namespace %p\n",
117 void msg_init_ns(struct ipc_namespace
*ns
)
119 ns
->msg_ctlmax
= MSGMAX
;
120 ns
->msg_ctlmnb
= MSGMNB
;
122 recompute_msgmni(ns
);
124 atomic_set(&ns
->msg_bytes
, 0);
125 atomic_set(&ns
->msg_hdrs
, 0);
126 ipc_init_ids(&ns
->ids
[IPC_MSG_IDS
]);
130 void msg_exit_ns(struct ipc_namespace
*ns
)
132 free_ipcs(ns
, &msg_ids(ns
), freeque
);
136 void __init
msg_init(void)
138 msg_init_ns(&init_ipc_ns
);
139 ipc_init_proc_interface("sysvipc/msg",
140 " key msqid perms cbytes qnum lspid lrpid uid gid cuid cgid stime rtime ctime\n",
141 IPC_MSG_IDS
, sysvipc_msg_proc_show
);
145 * This routine is called in the paths where the rw_mutex is held to protect
146 * access to the idr tree.
148 static inline struct msg_queue
*msg_lock_check_down(struct ipc_namespace
*ns
,
151 struct kern_ipc_perm
*ipcp
= ipc_lock_check_down(&msg_ids(ns
), id
);
154 return (struct msg_queue
*)ipcp
;
156 return container_of(ipcp
, struct msg_queue
, q_perm
);
160 * msg_lock_(check_) routines are called in the paths where the rw_mutex
163 static inline struct msg_queue
*msg_lock(struct ipc_namespace
*ns
, int id
)
165 struct kern_ipc_perm
*ipcp
= ipc_lock(&msg_ids(ns
), id
);
168 return (struct msg_queue
*)ipcp
;
170 return container_of(ipcp
, struct msg_queue
, q_perm
);
173 static inline struct msg_queue
*msg_lock_check(struct ipc_namespace
*ns
,
176 struct kern_ipc_perm
*ipcp
= ipc_lock_check(&msg_ids(ns
), id
);
179 return (struct msg_queue
*)ipcp
;
181 return container_of(ipcp
, struct msg_queue
, q_perm
);
184 static inline void msg_rmid(struct ipc_namespace
*ns
, struct msg_queue
*s
)
186 ipc_rmid(&msg_ids(ns
), &s
->q_perm
);
190 * newque - Create a new msg queue
192 * @params: ptr to the structure that contains the key and msgflg
194 * Called with msg_ids.rw_mutex held (writer)
196 static int newque(struct ipc_namespace
*ns
, struct ipc_params
*params
)
198 struct msg_queue
*msq
;
200 key_t key
= params
->key
;
201 int msgflg
= params
->flg
;
203 msq
= ipc_rcu_alloc(sizeof(*msq
));
207 msq
->q_perm
.mode
= msgflg
& S_IRWXUGO
;
208 msq
->q_perm
.key
= key
;
210 msq
->q_perm
.security
= NULL
;
211 retval
= security_msg_queue_alloc(msq
);
218 * ipc_addid() locks msq
220 id
= ipc_addid(&msg_ids(ns
), &msq
->q_perm
, ns
->msg_ctlmni
);
222 security_msg_queue_free(msq
);
227 msq
->q_stime
= msq
->q_rtime
= 0;
228 msq
->q_ctime
= get_seconds();
229 msq
->q_cbytes
= msq
->q_qnum
= 0;
230 msq
->q_qbytes
= ns
->msg_ctlmnb
;
231 msq
->q_lspid
= msq
->q_lrpid
= 0;
232 INIT_LIST_HEAD(&msq
->q_messages
);
233 INIT_LIST_HEAD(&msq
->q_receivers
);
234 INIT_LIST_HEAD(&msq
->q_senders
);
238 return msq
->q_perm
.id
;
241 static inline void ss_add(struct msg_queue
*msq
, struct msg_sender
*mss
)
244 current
->state
= TASK_INTERRUPTIBLE
;
245 list_add_tail(&mss
->list
, &msq
->q_senders
);
248 static inline void ss_del(struct msg_sender
*mss
)
250 if (mss
->list
.next
!= NULL
)
251 list_del(&mss
->list
);
254 static void ss_wakeup(struct list_head
*h
, int kill
)
256 struct list_head
*tmp
;
260 struct msg_sender
*mss
;
262 mss
= list_entry(tmp
, struct msg_sender
, list
);
265 mss
->list
.next
= NULL
;
266 wake_up_process(mss
->tsk
);
270 static void expunge_all(struct msg_queue
*msq
, int res
)
272 struct list_head
*tmp
;
274 tmp
= msq
->q_receivers
.next
;
275 while (tmp
!= &msq
->q_receivers
) {
276 struct msg_receiver
*msr
;
278 msr
= list_entry(tmp
, struct msg_receiver
, r_list
);
281 wake_up_process(msr
->r_tsk
);
283 msr
->r_msg
= ERR_PTR(res
);
288 * freeque() wakes up waiters on the sender and receiver waiting queue,
289 * removes the message queue from message queue ID IDR, and cleans up all the
290 * messages associated with this queue.
292 * msg_ids.rw_mutex (writer) and the spinlock for this message queue are held
293 * before freeque() is called. msg_ids.rw_mutex remains locked on exit.
295 static void freeque(struct ipc_namespace
*ns
, struct kern_ipc_perm
*ipcp
)
297 struct list_head
*tmp
;
298 struct msg_queue
*msq
= container_of(ipcp
, struct msg_queue
, q_perm
);
300 expunge_all(msq
, -EIDRM
);
301 ss_wakeup(&msq
->q_senders
, 1);
305 tmp
= msq
->q_messages
.next
;
306 while (tmp
!= &msq
->q_messages
) {
307 struct msg_msg
*msg
= list_entry(tmp
, struct msg_msg
, m_list
);
310 atomic_dec(&ns
->msg_hdrs
);
313 atomic_sub(msq
->q_cbytes
, &ns
->msg_bytes
);
314 security_msg_queue_free(msq
);
319 * Called with msg_ids.rw_mutex and ipcp locked.
321 static inline int msg_security(struct kern_ipc_perm
*ipcp
, int msgflg
)
323 struct msg_queue
*msq
= container_of(ipcp
, struct msg_queue
, q_perm
);
325 return security_msg_queue_associate(msq
, msgflg
);
328 asmlinkage
long sys_msgget(key_t key
, int msgflg
)
330 struct ipc_namespace
*ns
;
331 struct ipc_ops msg_ops
;
332 struct ipc_params msg_params
;
334 ns
= current
->nsproxy
->ipc_ns
;
336 msg_ops
.getnew
= newque
;
337 msg_ops
.associate
= msg_security
;
338 msg_ops
.more_checks
= NULL
;
340 msg_params
.key
= key
;
341 msg_params
.flg
= msgflg
;
343 return ipcget(ns
, &msg_ids(ns
), &msg_ops
, &msg_params
);
346 static inline unsigned long
347 copy_msqid_to_user(void __user
*buf
, struct msqid64_ds
*in
, int version
)
351 return copy_to_user(buf
, in
, sizeof(*in
));
356 memset(&out
, 0, sizeof(out
));
358 ipc64_perm_to_ipc_perm(&in
->msg_perm
, &out
.msg_perm
);
360 out
.msg_stime
= in
->msg_stime
;
361 out
.msg_rtime
= in
->msg_rtime
;
362 out
.msg_ctime
= in
->msg_ctime
;
364 if (in
->msg_cbytes
> USHRT_MAX
)
365 out
.msg_cbytes
= USHRT_MAX
;
367 out
.msg_cbytes
= in
->msg_cbytes
;
368 out
.msg_lcbytes
= in
->msg_cbytes
;
370 if (in
->msg_qnum
> USHRT_MAX
)
371 out
.msg_qnum
= USHRT_MAX
;
373 out
.msg_qnum
= in
->msg_qnum
;
375 if (in
->msg_qbytes
> USHRT_MAX
)
376 out
.msg_qbytes
= USHRT_MAX
;
378 out
.msg_qbytes
= in
->msg_qbytes
;
379 out
.msg_lqbytes
= in
->msg_qbytes
;
381 out
.msg_lspid
= in
->msg_lspid
;
382 out
.msg_lrpid
= in
->msg_lrpid
;
384 return copy_to_user(buf
, &out
, sizeof(out
));
392 unsigned long qbytes
;
398 static inline unsigned long
399 copy_msqid_from_user(struct msq_setbuf
*out
, void __user
*buf
, int version
)
404 struct msqid64_ds tbuf
;
406 if (copy_from_user(&tbuf
, buf
, sizeof(tbuf
)))
409 out
->qbytes
= tbuf
.msg_qbytes
;
410 out
->uid
= tbuf
.msg_perm
.uid
;
411 out
->gid
= tbuf
.msg_perm
.gid
;
412 out
->mode
= tbuf
.msg_perm
.mode
;
418 struct msqid_ds tbuf_old
;
420 if (copy_from_user(&tbuf_old
, buf
, sizeof(tbuf_old
)))
423 out
->uid
= tbuf_old
.msg_perm
.uid
;
424 out
->gid
= tbuf_old
.msg_perm
.gid
;
425 out
->mode
= tbuf_old
.msg_perm
.mode
;
427 if (tbuf_old
.msg_qbytes
== 0)
428 out
->qbytes
= tbuf_old
.msg_lqbytes
;
430 out
->qbytes
= tbuf_old
.msg_qbytes
;
439 asmlinkage
long sys_msgctl(int msqid
, int cmd
, struct msqid_ds __user
*buf
)
441 struct kern_ipc_perm
*ipcp
;
442 struct msq_setbuf
uninitialized_var(setbuf
);
443 struct msg_queue
*msq
;
445 struct ipc_namespace
*ns
;
447 if (msqid
< 0 || cmd
< 0)
450 version
= ipc_parse_version(&cmd
);
451 ns
= current
->nsproxy
->ipc_ns
;
457 struct msginfo msginfo
;
463 * We must not return kernel stack data.
464 * due to padding, it's not enough
465 * to set all member fields.
467 err
= security_msg_queue_msgctl(NULL
, cmd
);
471 memset(&msginfo
, 0, sizeof(msginfo
));
472 msginfo
.msgmni
= ns
->msg_ctlmni
;
473 msginfo
.msgmax
= ns
->msg_ctlmax
;
474 msginfo
.msgmnb
= ns
->msg_ctlmnb
;
475 msginfo
.msgssz
= MSGSSZ
;
476 msginfo
.msgseg
= MSGSEG
;
477 down_read(&msg_ids(ns
).rw_mutex
);
478 if (cmd
== MSG_INFO
) {
479 msginfo
.msgpool
= msg_ids(ns
).in_use
;
480 msginfo
.msgmap
= atomic_read(&ns
->msg_hdrs
);
481 msginfo
.msgtql
= atomic_read(&ns
->msg_bytes
);
483 msginfo
.msgmap
= MSGMAP
;
484 msginfo
.msgpool
= MSGPOOL
;
485 msginfo
.msgtql
= MSGTQL
;
487 max_id
= ipc_get_maxid(&msg_ids(ns
));
488 up_read(&msg_ids(ns
).rw_mutex
);
489 if (copy_to_user(buf
, &msginfo
, sizeof(struct msginfo
)))
491 return (max_id
< 0) ? 0 : max_id
;
493 case MSG_STAT
: /* msqid is an index rather than a msg queue id */
496 struct msqid64_ds tbuf
;
502 if (cmd
== MSG_STAT
) {
503 msq
= msg_lock(ns
, msqid
);
506 success_return
= msq
->q_perm
.id
;
508 msq
= msg_lock_check(ns
, msqid
);
514 if (ipcperms(&msq
->q_perm
, S_IRUGO
))
517 err
= security_msg_queue_msgctl(msq
, cmd
);
521 memset(&tbuf
, 0, sizeof(tbuf
));
523 kernel_to_ipc64_perm(&msq
->q_perm
, &tbuf
.msg_perm
);
524 tbuf
.msg_stime
= msq
->q_stime
;
525 tbuf
.msg_rtime
= msq
->q_rtime
;
526 tbuf
.msg_ctime
= msq
->q_ctime
;
527 tbuf
.msg_cbytes
= msq
->q_cbytes
;
528 tbuf
.msg_qnum
= msq
->q_qnum
;
529 tbuf
.msg_qbytes
= msq
->q_qbytes
;
530 tbuf
.msg_lspid
= msq
->q_lspid
;
531 tbuf
.msg_lrpid
= msq
->q_lrpid
;
533 if (copy_msqid_to_user(buf
, &tbuf
, version
))
535 return success_return
;
540 if (copy_msqid_from_user(&setbuf
, buf
, version
))
549 down_write(&msg_ids(ns
).rw_mutex
);
550 msq
= msg_lock_check_down(ns
, msqid
);
558 err
= audit_ipc_obj(ipcp
);
561 if (cmd
== IPC_SET
) {
562 err
= audit_ipc_set_perm(setbuf
.qbytes
, setbuf
.uid
, setbuf
.gid
,
569 if (current
->euid
!= ipcp
->cuid
&&
570 current
->euid
!= ipcp
->uid
&& !capable(CAP_SYS_ADMIN
))
571 /* We _could_ check for CAP_CHOWN above, but we don't */
574 err
= security_msg_queue_msgctl(msq
, cmd
);
582 if (setbuf
.qbytes
> ns
->msg_ctlmnb
&& !capable(CAP_SYS_RESOURCE
))
585 msq
->q_qbytes
= setbuf
.qbytes
;
587 ipcp
->uid
= setbuf
.uid
;
588 ipcp
->gid
= setbuf
.gid
;
589 ipcp
->mode
= (ipcp
->mode
& ~S_IRWXUGO
) |
590 (S_IRWXUGO
& setbuf
.mode
);
591 msq
->q_ctime
= get_seconds();
592 /* sleeping receivers might be excluded by
593 * stricter permissions.
595 expunge_all(msq
, -EAGAIN
);
596 /* sleeping senders might be able to send
597 * due to a larger queue size.
599 ss_wakeup(&msq
->q_senders
, 0);
604 freeque(ns
, &msq
->q_perm
);
609 up_write(&msg_ids(ns
).rw_mutex
);
619 static int testmsg(struct msg_msg
*msg
, long type
, int mode
)
625 case SEARCH_LESSEQUAL
:
626 if (msg
->m_type
<=type
)
630 if (msg
->m_type
== type
)
633 case SEARCH_NOTEQUAL
:
634 if (msg
->m_type
!= type
)
641 static inline int pipelined_send(struct msg_queue
*msq
, struct msg_msg
*msg
)
643 struct list_head
*tmp
;
645 tmp
= msq
->q_receivers
.next
;
646 while (tmp
!= &msq
->q_receivers
) {
647 struct msg_receiver
*msr
;
649 msr
= list_entry(tmp
, struct msg_receiver
, r_list
);
651 if (testmsg(msg
, msr
->r_msgtype
, msr
->r_mode
) &&
652 !security_msg_queue_msgrcv(msq
, msg
, msr
->r_tsk
,
653 msr
->r_msgtype
, msr
->r_mode
)) {
655 list_del(&msr
->r_list
);
656 if (msr
->r_maxsize
< msg
->m_ts
) {
658 wake_up_process(msr
->r_tsk
);
660 msr
->r_msg
= ERR_PTR(-E2BIG
);
663 msq
->q_lrpid
= task_pid_vnr(msr
->r_tsk
);
664 msq
->q_rtime
= get_seconds();
665 wake_up_process(msr
->r_tsk
);
676 long do_msgsnd(int msqid
, long mtype
, void __user
*mtext
,
677 size_t msgsz
, int msgflg
)
679 struct msg_queue
*msq
;
682 struct ipc_namespace
*ns
;
684 ns
= current
->nsproxy
->ipc_ns
;
686 if (msgsz
> ns
->msg_ctlmax
|| (long) msgsz
< 0 || msqid
< 0)
691 msg
= load_msg(mtext
, msgsz
);
698 msq
= msg_lock_check(ns
, msqid
);
708 if (ipcperms(&msq
->q_perm
, S_IWUGO
))
709 goto out_unlock_free
;
711 err
= security_msg_queue_msgsnd(msq
, msg
, msgflg
);
713 goto out_unlock_free
;
715 if (msgsz
+ msq
->q_cbytes
<= msq
->q_qbytes
&&
716 1 + msq
->q_qnum
<= msq
->q_qbytes
) {
720 /* queue full, wait: */
721 if (msgflg
& IPC_NOWAIT
) {
723 goto out_unlock_free
;
730 ipc_lock_by_ptr(&msq
->q_perm
);
732 if (msq
->q_perm
.deleted
) {
734 goto out_unlock_free
;
738 if (signal_pending(current
)) {
739 err
= -ERESTARTNOHAND
;
740 goto out_unlock_free
;
744 msq
->q_lspid
= task_tgid_vnr(current
);
745 msq
->q_stime
= get_seconds();
747 if (!pipelined_send(msq
, msg
)) {
748 /* noone is waiting for this message, enqueue it */
749 list_add_tail(&msg
->m_list
, &msq
->q_messages
);
750 msq
->q_cbytes
+= msgsz
;
752 atomic_add(msgsz
, &ns
->msg_bytes
);
753 atomic_inc(&ns
->msg_hdrs
);
768 sys_msgsnd(int msqid
, struct msgbuf __user
*msgp
, size_t msgsz
, int msgflg
)
772 if (get_user(mtype
, &msgp
->mtype
))
774 return do_msgsnd(msqid
, mtype
, msgp
->mtext
, msgsz
, msgflg
);
777 static inline int convert_mode(long *msgtyp
, int msgflg
)
780 * find message of correct type.
781 * msgtyp = 0 => get first.
782 * msgtyp > 0 => get first message of matching type.
783 * msgtyp < 0 => get message with least type must be < abs(msgtype).
789 return SEARCH_LESSEQUAL
;
791 if (msgflg
& MSG_EXCEPT
)
792 return SEARCH_NOTEQUAL
;
796 long do_msgrcv(int msqid
, long *pmtype
, void __user
*mtext
,
797 size_t msgsz
, long msgtyp
, int msgflg
)
799 struct msg_queue
*msq
;
802 struct ipc_namespace
*ns
;
804 if (msqid
< 0 || (long) msgsz
< 0)
806 mode
= convert_mode(&msgtyp
, msgflg
);
807 ns
= current
->nsproxy
->ipc_ns
;
809 msq
= msg_lock_check(ns
, msqid
);
814 struct msg_receiver msr_d
;
815 struct list_head
*tmp
;
817 msg
= ERR_PTR(-EACCES
);
818 if (ipcperms(&msq
->q_perm
, S_IRUGO
))
821 msg
= ERR_PTR(-EAGAIN
);
822 tmp
= msq
->q_messages
.next
;
823 while (tmp
!= &msq
->q_messages
) {
824 struct msg_msg
*walk_msg
;
826 walk_msg
= list_entry(tmp
, struct msg_msg
, m_list
);
827 if (testmsg(walk_msg
, msgtyp
, mode
) &&
828 !security_msg_queue_msgrcv(msq
, walk_msg
, current
,
832 if (mode
== SEARCH_LESSEQUAL
&&
833 walk_msg
->m_type
!= 1) {
835 msgtyp
= walk_msg
->m_type
- 1;
845 * Found a suitable message.
846 * Unlink it from the queue.
848 if ((msgsz
< msg
->m_ts
) && !(msgflg
& MSG_NOERROR
)) {
849 msg
= ERR_PTR(-E2BIG
);
852 list_del(&msg
->m_list
);
854 msq
->q_rtime
= get_seconds();
855 msq
->q_lrpid
= task_tgid_vnr(current
);
856 msq
->q_cbytes
-= msg
->m_ts
;
857 atomic_sub(msg
->m_ts
, &ns
->msg_bytes
);
858 atomic_dec(&ns
->msg_hdrs
);
859 ss_wakeup(&msq
->q_senders
, 0);
863 /* No message waiting. Wait for a message */
864 if (msgflg
& IPC_NOWAIT
) {
865 msg
= ERR_PTR(-ENOMSG
);
868 list_add_tail(&msr_d
.r_list
, &msq
->q_receivers
);
869 msr_d
.r_tsk
= current
;
870 msr_d
.r_msgtype
= msgtyp
;
872 if (msgflg
& MSG_NOERROR
)
873 msr_d
.r_maxsize
= INT_MAX
;
875 msr_d
.r_maxsize
= msgsz
;
876 msr_d
.r_msg
= ERR_PTR(-EAGAIN
);
877 current
->state
= TASK_INTERRUPTIBLE
;
882 /* Lockless receive, part 1:
883 * Disable preemption. We don't hold a reference to the queue
884 * and getting a reference would defeat the idea of a lockless
885 * operation, thus the code relies on rcu to guarantee the
887 * Prior to destruction, expunge_all(-EIRDM) changes r_msg.
888 * Thus if r_msg is -EAGAIN, then the queue not yet destroyed.
889 * rcu_read_lock() prevents preemption between reading r_msg
890 * and the spin_lock() inside ipc_lock_by_ptr().
894 /* Lockless receive, part 2:
895 * Wait until pipelined_send or expunge_all are outside of
896 * wake_up_process(). There is a race with exit(), see
897 * ipc/mqueue.c for the details.
899 msg
= (struct msg_msg
*)msr_d
.r_msg
;
900 while (msg
== NULL
) {
902 msg
= (struct msg_msg
*)msr_d
.r_msg
;
905 /* Lockless receive, part 3:
906 * If there is a message or an error then accept it without
909 if (msg
!= ERR_PTR(-EAGAIN
)) {
914 /* Lockless receive, part 3:
915 * Acquire the queue spinlock.
917 ipc_lock_by_ptr(&msq
->q_perm
);
920 /* Lockless receive, part 4:
921 * Repeat test after acquiring the spinlock.
923 msg
= (struct msg_msg
*)msr_d
.r_msg
;
924 if (msg
!= ERR_PTR(-EAGAIN
))
927 list_del(&msr_d
.r_list
);
928 if (signal_pending(current
)) {
929 msg
= ERR_PTR(-ERESTARTNOHAND
);
938 msgsz
= (msgsz
> msg
->m_ts
) ? msg
->m_ts
: msgsz
;
939 *pmtype
= msg
->m_type
;
940 if (store_msg(mtext
, msg
, msgsz
))
948 asmlinkage
long sys_msgrcv(int msqid
, struct msgbuf __user
*msgp
, size_t msgsz
,
949 long msgtyp
, int msgflg
)
953 err
= do_msgrcv(msqid
, &mtype
, msgp
->mtext
, msgsz
, msgtyp
, msgflg
);
957 if (put_user(mtype
, &msgp
->mtype
))
963 #ifdef CONFIG_PROC_FS
964 static int sysvipc_msg_proc_show(struct seq_file
*s
, void *it
)
966 struct msg_queue
*msq
= it
;
969 "%10d %10d %4o %10lu %10lu %5u %5u %5u %5u %5u %5u %10lu %10lu %10lu\n",