4 ** The author disclaims copyright to this source code. In place of
5 ** a legal notice, here is a blessing:
7 ** May you do good and not evil.
8 ** May you find forgiveness for yourself and forgive others.
9 ** May you share freely, never taking more than you give.
11 ******************************************************************************
13 ** This file contains the VFS implementation for unix-like operating systems
14 ** include Linux, MacOSX, *BSD, QNX, VxWorks, AIX, HPUX, and others.
16 ** There are actually several different VFS implementations in this file.
17 ** The differences are in the way that file locking is done. The default
18 ** implementation uses Posix Advisory Locks. Alternative implementations
19 ** use flock(), dot-files, various proprietary locking schemas, or simply
20 ** skip locking all together.
22 ** This source file is organized into divisions where the logic for various
23 ** subfunctions is contained within the appropriate division. PLEASE
24 ** KEEP THE STRUCTURE OF THIS FILE INTACT. New code should be placed
25 ** in the correct division and should be clearly labeled.
27 ** The layout of divisions is as follows:
29 ** * General-purpose declarations and utility functions.
30 ** * Unique file ID logic used by VxWorks.
31 ** * Various locking primitive implementations (all except proxy locking):
32 ** + for Posix Advisory Locks
34 ** + for dot-file locks
35 ** + for flock() locking
36 ** + for named semaphore locks (VxWorks only)
37 ** + for AFP filesystem locks (MacOSX only)
38 ** * sqlite3_file methods not associated with locking.
39 ** * Definitions of sqlite3_io_methods objects for all locking
40 ** methods plus "finder" functions for each locking method.
41 ** * sqlite3_vfs method implementations.
42 ** * Locking primitives for the proxy uber-locking-method. (MacOSX only)
43 ** * Definitions of sqlite3_vfs objects for all locking methods
44 ** plus implementations of sqlite3_os_init() and sqlite3_os_end().
46 #include "sqliteInt.h"
47 #if SQLITE_OS_UNIX /* This file is used on unix only */
50 ** There are various methods for file locking used for concurrency
53 ** 1. POSIX locking (the default),
55 ** 3. Dot-file locking,
56 ** 4. flock() locking,
57 ** 5. AFP locking (OSX only),
58 ** 6. Named POSIX semaphores (VXWorks only),
59 ** 7. proxy locking. (OSX only)
61 ** Styles 4, 5, and 7 are only available of SQLITE_ENABLE_LOCKING_STYLE
62 ** is defined to 1. The SQLITE_ENABLE_LOCKING_STYLE also enables automatic
63 ** selection of the appropriate locking style based on the filesystem
64 ** where the database is located.
66 #if !defined(SQLITE_ENABLE_LOCKING_STYLE)
67 # if defined(__APPLE__)
68 # define SQLITE_ENABLE_LOCKING_STYLE 1
70 # define SQLITE_ENABLE_LOCKING_STYLE 0
74 /* Use pread() and pwrite() if they are available */
75 #if defined(__APPLE__)
77 # define HAVE_PWRITE 1
79 #if defined(HAVE_PREAD64) && defined(HAVE_PWRITE64)
81 # define USE_PREAD64 1
82 #elif defined(HAVE_PREAD) && defined(HAVE_PWRITE)
88 ** standard include files.
90 #include <sys/types.h>
93 #include <sys/ioctl.h>
98 #if !defined(SQLITE_OMIT_WAL) || SQLITE_MAX_MMAP_SIZE>0
99 # include <sys/mman.h>
102 #if SQLITE_ENABLE_LOCKING_STYLE
103 # include <sys/ioctl.h>
104 # include <sys/file.h>
105 # include <sys/param.h>
106 #endif /* SQLITE_ENABLE_LOCKING_STYLE */
108 #if defined(__APPLE__) && ((__MAC_OS_X_VERSION_MIN_REQUIRED > 1050) || \
109 (__IPHONE_OS_VERSION_MIN_REQUIRED > 2000))
110 # if (!defined(TARGET_OS_EMBEDDED) || (TARGET_OS_EMBEDDED==0)) \
111 && (!defined(TARGET_IPHONE_SIMULATOR) || (TARGET_IPHONE_SIMULATOR==0))
112 # define HAVE_GETHOSTUUID 1
114 # warning "gethostuuid() is disabled."
120 # include <sys/ioctl.h>
121 # include <semaphore.h>
123 #endif /* OS_VXWORKS */
125 #if defined(__APPLE__) || SQLITE_ENABLE_LOCKING_STYLE
126 # include <sys/mount.h>
134 ** Allowed values of unixFile.fsFlags
136 #define SQLITE_FSFLAGS_IS_MSDOS 0x1
139 ** If we are to be thread-safe, include the pthreads header and define
140 ** the SQLITE_UNIX_THREADS macro.
142 #if SQLITE_THREADSAFE
143 # include <pthread.h>
144 # define SQLITE_UNIX_THREADS 1
148 ** Default permissions when creating a new file
150 #ifndef SQLITE_DEFAULT_FILE_PERMISSIONS
151 # define SQLITE_DEFAULT_FILE_PERMISSIONS 0644
155 ** Default permissions when creating auto proxy dir
157 #ifndef SQLITE_DEFAULT_PROXYDIR_PERMISSIONS
158 # define SQLITE_DEFAULT_PROXYDIR_PERMISSIONS 0755
162 ** Maximum supported path-length.
164 #define MAX_PATHNAME 512
167 ** Maximum supported symbolic links
169 #define SQLITE_MAX_SYMLINKS 100
171 /* Always cast the getpid() return type for compatibility with
172 ** kernel modules in VxWorks. */
173 #define osGetpid(X) (pid_t)getpid()
176 ** Only set the lastErrno if the error code is a real error and not
177 ** a normal expected return code of SQLITE_BUSY or SQLITE_OK
179 #define IS_LOCK_ERROR(x) ((x != SQLITE_OK) && (x != SQLITE_BUSY))
181 /* Forward references */
182 typedef struct unixShm unixShm
; /* Connection shared memory */
183 typedef struct unixShmNode unixShmNode
; /* Shared memory instance */
184 typedef struct unixInodeInfo unixInodeInfo
; /* An i-node */
185 typedef struct UnixUnusedFd UnixUnusedFd
; /* An unused file descriptor */
188 ** Sometimes, after a file handle is closed by SQLite, the file descriptor
189 ** cannot be closed immediately. In these cases, instances of the following
190 ** structure are used to store the file descriptor while waiting for an
191 ** opportunity to either close or reuse it.
193 struct UnixUnusedFd
{
194 int fd
; /* File descriptor to close */
195 int flags
; /* Flags this file descriptor was opened with */
196 UnixUnusedFd
*pNext
; /* Next unused file descriptor on same file */
200 ** The unixFile structure is subclass of sqlite3_file specific to the unix
201 ** VFS implementations.
203 typedef struct unixFile unixFile
;
205 sqlite3_io_methods
const *pMethod
; /* Always the first entry */
206 sqlite3_vfs
*pVfs
; /* The VFS that created this unixFile */
207 unixInodeInfo
*pInode
; /* Info about locks on this inode */
208 int h
; /* The file descriptor */
209 unsigned char eFileLock
; /* The type of lock held on this fd */
210 unsigned short int ctrlFlags
; /* Behavioral bits. UNIXFILE_* flags */
211 int lastErrno
; /* The unix errno from last I/O error */
212 void *lockingContext
; /* Locking style specific state */
213 UnixUnusedFd
*pPreallocatedUnused
; /* Pre-allocated UnixUnusedFd */
214 const char *zPath
; /* Name of the file */
215 unixShm
*pShm
; /* Shared memory segment information */
216 int szChunk
; /* Configured by FCNTL_CHUNK_SIZE */
217 #if SQLITE_MAX_MMAP_SIZE>0
218 int nFetchOut
; /* Number of outstanding xFetch refs */
219 sqlite3_int64 mmapSize
; /* Usable size of mapping at pMapRegion */
220 sqlite3_int64 mmapSizeActual
; /* Actual size of mapping at pMapRegion */
221 sqlite3_int64 mmapSizeMax
; /* Configured FCNTL_MMAP_SIZE value */
222 void *pMapRegion
; /* Memory mapped region */
224 int sectorSize
; /* Device sector size */
225 int deviceCharacteristics
; /* Precomputed device characteristics */
226 #if SQLITE_ENABLE_LOCKING_STYLE
227 int openFlags
; /* The flags specified at open() */
229 #if SQLITE_ENABLE_LOCKING_STYLE || defined(__APPLE__)
230 unsigned fsFlags
; /* cached details from statfs() */
233 struct vxworksFileId
*pId
; /* Unique file ID */
236 /* The next group of variables are used to track whether or not the
237 ** transaction counter in bytes 24-27 of database files are updated
238 ** whenever any part of the database changes. An assertion fault will
239 ** occur if a file is updated without also updating the transaction
240 ** counter. This test is made to avoid new problems similar to the
241 ** one described by ticket #3584.
243 unsigned char transCntrChng
; /* True if the transaction counter changed */
244 unsigned char dbUpdate
; /* True if any part of database file changed */
245 unsigned char inNormalWrite
; /* True if in a normal write operation */
250 /* In test mode, increase the size of this structure a bit so that
251 ** it is larger than the struct CrashFile defined in test6.c.
257 /* This variable holds the process id (pid) from when the xRandomness()
258 ** method was called. If xOpen() is called from a different process id,
259 ** indicating that a fork() has occurred, the PRNG will be reset.
261 static pid_t randomnessPid
= 0;
264 ** Allowed values for the unixFile.ctrlFlags bitmask:
266 #define UNIXFILE_EXCL 0x01 /* Connections from one process only */
267 #define UNIXFILE_RDONLY 0x02 /* Connection is read only */
268 #define UNIXFILE_PERSIST_WAL 0x04 /* Persistent WAL mode */
269 #ifndef SQLITE_DISABLE_DIRSYNC
270 # define UNIXFILE_DIRSYNC 0x08 /* Directory sync needed */
272 # define UNIXFILE_DIRSYNC 0x00
274 #define UNIXFILE_PSOW 0x10 /* SQLITE_IOCAP_POWERSAFE_OVERWRITE */
275 #define UNIXFILE_DELETE 0x20 /* Delete on close */
276 #define UNIXFILE_URI 0x40 /* Filename might have query parameters */
277 #define UNIXFILE_NOLOCK 0x80 /* Do no file locking */
280 ** Include code that is common to all os_*.c files
282 #include "os_common.h"
285 ** Define various macros that are missing from some systems.
288 # define O_LARGEFILE 0
290 #ifdef SQLITE_DISABLE_LFS
292 # define O_LARGEFILE 0
295 # define O_NOFOLLOW 0
302 ** The threadid macro resolves to the thread-id or to 0. Used for
303 ** testing and debugging only.
305 #if SQLITE_THREADSAFE
306 #define threadid pthread_self()
312 ** HAVE_MREMAP defaults to true on Linux and false everywhere else.
314 #if !defined(HAVE_MREMAP)
315 # if defined(__linux__) && defined(_GNU_SOURCE)
316 # define HAVE_MREMAP 1
318 # define HAVE_MREMAP 0
323 ** Explicitly call the 64-bit version of lseek() on Android. Otherwise, lseek()
324 ** is the 32-bit version, even if _FILE_OFFSET_BITS=64 is defined.
327 # define lseek lseek64
332 ** Linux-specific IOCTL magic numbers used for controlling F2FS
334 #define F2FS_IOCTL_MAGIC 0xf5
335 #define F2FS_IOC_START_ATOMIC_WRITE _IO(F2FS_IOCTL_MAGIC, 1)
336 #define F2FS_IOC_COMMIT_ATOMIC_WRITE _IO(F2FS_IOCTL_MAGIC, 2)
337 #define F2FS_IOC_START_VOLATILE_WRITE _IO(F2FS_IOCTL_MAGIC, 3)
338 #define F2FS_IOC_ABORT_VOLATILE_WRITE _IO(F2FS_IOCTL_MAGIC, 5)
339 #define F2FS_IOC_GET_FEATURES _IOR(F2FS_IOCTL_MAGIC, 12, u32)
340 #define F2FS_FEATURE_ATOMIC_WRITE 0x0004
341 #endif /* __linux__ */
345 ** Different Unix systems declare open() in different ways. Same use
346 ** open(const char*,int,mode_t). Others use open(const char*,int,...).
347 ** The difference is important when using a pointer to the function.
349 ** The safest way to deal with the problem is to always use this wrapper
350 ** which always has the same well-defined interface.
352 static int posixOpen(const char *zFile
, int flags
, int mode
){
353 return open(zFile
, flags
, mode
);
356 /* Forward reference */
357 static int openDirectory(const char*, int*);
358 static int unixGetpagesize(void);
361 ** Many system calls are accessed through pointer-to-functions so that
362 ** they may be overridden at runtime to facilitate fault injection during
363 ** testing and sandboxing. The following array holds the names and pointers
364 ** to all overrideable system calls.
366 static struct unix_syscall
{
367 const char *zName
; /* Name of the system call */
368 sqlite3_syscall_ptr pCurrent
; /* Current value of the system call */
369 sqlite3_syscall_ptr pDefault
; /* Default value */
371 { "open", (sqlite3_syscall_ptr
)posixOpen
, 0 },
372 #define osOpen ((int(*)(const char*,int,int))aSyscall[0].pCurrent)
374 { "close", (sqlite3_syscall_ptr
)close
, 0 },
375 #define osClose ((int(*)(int))aSyscall[1].pCurrent)
377 { "access", (sqlite3_syscall_ptr
)access
, 0 },
378 #define osAccess ((int(*)(const char*,int))aSyscall[2].pCurrent)
380 { "getcwd", (sqlite3_syscall_ptr
)getcwd
, 0 },
381 #define osGetcwd ((char*(*)(char*,size_t))aSyscall[3].pCurrent)
383 { "stat", (sqlite3_syscall_ptr
)stat
, 0 },
384 #define osStat ((int(*)(const char*,struct stat*))aSyscall[4].pCurrent)
387 ** The DJGPP compiler environment looks mostly like Unix, but it
388 ** lacks the fcntl() system call. So redefine fcntl() to be something
389 ** that always succeeds. This means that locking does not occur under
390 ** DJGPP. But it is DOS - what did you expect?
394 #define osFstat(a,b,c) 0
396 { "fstat", (sqlite3_syscall_ptr
)fstat
, 0 },
397 #define osFstat ((int(*)(int,struct stat*))aSyscall[5].pCurrent)
400 { "ftruncate", (sqlite3_syscall_ptr
)ftruncate
, 0 },
401 #define osFtruncate ((int(*)(int,off_t))aSyscall[6].pCurrent)
403 { "fcntl", (sqlite3_syscall_ptr
)fcntl
, 0 },
404 #define osFcntl ((int(*)(int,int,...))aSyscall[7].pCurrent)
406 { "read", (sqlite3_syscall_ptr
)read
, 0 },
407 #define osRead ((ssize_t(*)(int,void*,size_t))aSyscall[8].pCurrent)
409 #if defined(USE_PREAD) || SQLITE_ENABLE_LOCKING_STYLE
410 { "pread", (sqlite3_syscall_ptr
)pread
, 0 },
412 { "pread", (sqlite3_syscall_ptr
)0, 0 },
414 #define osPread ((ssize_t(*)(int,void*,size_t,off_t))aSyscall[9].pCurrent)
416 #if defined(USE_PREAD64)
417 { "pread64", (sqlite3_syscall_ptr
)pread64
, 0 },
419 { "pread64", (sqlite3_syscall_ptr
)0, 0 },
421 #define osPread64 ((ssize_t(*)(int,void*,size_t,off64_t))aSyscall[10].pCurrent)
423 { "write", (sqlite3_syscall_ptr
)write
, 0 },
424 #define osWrite ((ssize_t(*)(int,const void*,size_t))aSyscall[11].pCurrent)
426 #if defined(USE_PREAD) || SQLITE_ENABLE_LOCKING_STYLE
427 { "pwrite", (sqlite3_syscall_ptr
)pwrite
, 0 },
429 { "pwrite", (sqlite3_syscall_ptr
)0, 0 },
431 #define osPwrite ((ssize_t(*)(int,const void*,size_t,off_t))\
432 aSyscall[12].pCurrent)
434 #if defined(USE_PREAD64)
435 { "pwrite64", (sqlite3_syscall_ptr
)pwrite64
, 0 },
437 { "pwrite64", (sqlite3_syscall_ptr
)0, 0 },
439 #define osPwrite64 ((ssize_t(*)(int,const void*,size_t,off64_t))\
440 aSyscall[13].pCurrent)
442 { "fchmod", (sqlite3_syscall_ptr
)fchmod
, 0 },
443 #define osFchmod ((int(*)(int,mode_t))aSyscall[14].pCurrent)
445 #if defined(HAVE_POSIX_FALLOCATE) && HAVE_POSIX_FALLOCATE
446 { "fallocate", (sqlite3_syscall_ptr
)posix_fallocate
, 0 },
448 { "fallocate", (sqlite3_syscall_ptr
)0, 0 },
450 #define osFallocate ((int(*)(int,off_t,off_t))aSyscall[15].pCurrent)
452 { "unlink", (sqlite3_syscall_ptr
)unlink
, 0 },
453 #define osUnlink ((int(*)(const char*))aSyscall[16].pCurrent)
455 { "openDirectory", (sqlite3_syscall_ptr
)openDirectory
, 0 },
456 #define osOpenDirectory ((int(*)(const char*,int*))aSyscall[17].pCurrent)
458 { "mkdir", (sqlite3_syscall_ptr
)mkdir
, 0 },
459 #define osMkdir ((int(*)(const char*,mode_t))aSyscall[18].pCurrent)
461 { "rmdir", (sqlite3_syscall_ptr
)rmdir
, 0 },
462 #define osRmdir ((int(*)(const char*))aSyscall[19].pCurrent)
464 #if defined(HAVE_FCHOWN)
465 { "fchown", (sqlite3_syscall_ptr
)fchown
, 0 },
467 { "fchown", (sqlite3_syscall_ptr
)0, 0 },
469 #define osFchown ((int(*)(int,uid_t,gid_t))aSyscall[20].pCurrent)
471 { "geteuid", (sqlite3_syscall_ptr
)geteuid
, 0 },
472 #define osGeteuid ((uid_t(*)(void))aSyscall[21].pCurrent)
474 #if !defined(SQLITE_OMIT_WAL) || SQLITE_MAX_MMAP_SIZE>0
475 { "mmap", (sqlite3_syscall_ptr
)mmap
, 0 },
477 { "mmap", (sqlite3_syscall_ptr
)0, 0 },
479 #define osMmap ((void*(*)(void*,size_t,int,int,int,off_t))aSyscall[22].pCurrent)
481 #if !defined(SQLITE_OMIT_WAL) || SQLITE_MAX_MMAP_SIZE>0
482 { "munmap", (sqlite3_syscall_ptr
)munmap
, 0 },
484 { "munmap", (sqlite3_syscall_ptr
)0, 0 },
486 #define osMunmap ((int(*)(void*,size_t))aSyscall[23].pCurrent)
488 #if HAVE_MREMAP && (!defined(SQLITE_OMIT_WAL) || SQLITE_MAX_MMAP_SIZE>0)
489 { "mremap", (sqlite3_syscall_ptr
)mremap
, 0 },
491 { "mremap", (sqlite3_syscall_ptr
)0, 0 },
493 #define osMremap ((void*(*)(void*,size_t,size_t,int,...))aSyscall[24].pCurrent)
495 #if !defined(SQLITE_OMIT_WAL) || SQLITE_MAX_MMAP_SIZE>0
496 { "getpagesize", (sqlite3_syscall_ptr
)unixGetpagesize
, 0 },
498 { "getpagesize", (sqlite3_syscall_ptr
)0, 0 },
500 #define osGetpagesize ((int(*)(void))aSyscall[25].pCurrent)
502 #if defined(HAVE_READLINK)
503 { "readlink", (sqlite3_syscall_ptr
)readlink
, 0 },
505 { "readlink", (sqlite3_syscall_ptr
)0, 0 },
507 #define osReadlink ((ssize_t(*)(const char*,char*,size_t))aSyscall[26].pCurrent)
509 #if defined(HAVE_LSTAT)
510 { "lstat", (sqlite3_syscall_ptr
)lstat
, 0 },
512 { "lstat", (sqlite3_syscall_ptr
)0, 0 },
514 #define osLstat ((int(*)(const char*,struct stat*))aSyscall[27].pCurrent)
516 #if defined(__linux__) && defined(SQLITE_ENABLE_BATCH_ATOMIC_WRITE)
517 { "ioctl", (sqlite3_syscall_ptr
)ioctl
, 0 },
519 { "ioctl", (sqlite3_syscall_ptr
)0, 0 },
521 #define osIoctl ((int(*)(int,int,...))aSyscall[28].pCurrent)
523 }; /* End of the overrideable system calls */
527 ** On some systems, calls to fchown() will trigger a message in a security
528 ** log if they come from non-root processes. So avoid calling fchown() if
529 ** we are not running as root.
531 static int robustFchown(int fd
, uid_t uid
, gid_t gid
){
532 #if defined(HAVE_FCHOWN)
533 return osGeteuid() ? 0 : osFchown(fd
,uid
,gid
);
540 ** This is the xSetSystemCall() method of sqlite3_vfs for all of the
541 ** "unix" VFSes. Return SQLITE_OK opon successfully updating the
542 ** system call pointer, or SQLITE_NOTFOUND if there is no configurable
543 ** system call named zName.
545 static int unixSetSystemCall(
546 sqlite3_vfs
*pNotUsed
, /* The VFS pointer. Not used */
547 const char *zName
, /* Name of system call to override */
548 sqlite3_syscall_ptr pNewFunc
/* Pointer to new system call value */
551 int rc
= SQLITE_NOTFOUND
;
553 UNUSED_PARAMETER(pNotUsed
);
555 /* If no zName is given, restore all system calls to their default
556 ** settings and return NULL
559 for(i
=0; i
<sizeof(aSyscall
)/sizeof(aSyscall
[0]); i
++){
560 if( aSyscall
[i
].pDefault
){
561 aSyscall
[i
].pCurrent
= aSyscall
[i
].pDefault
;
565 /* If zName is specified, operate on only the one system call
568 for(i
=0; i
<sizeof(aSyscall
)/sizeof(aSyscall
[0]); i
++){
569 if( strcmp(zName
, aSyscall
[i
].zName
)==0 ){
570 if( aSyscall
[i
].pDefault
==0 ){
571 aSyscall
[i
].pDefault
= aSyscall
[i
].pCurrent
;
574 if( pNewFunc
==0 ) pNewFunc
= aSyscall
[i
].pDefault
;
575 aSyscall
[i
].pCurrent
= pNewFunc
;
584 ** Return the value of a system call. Return NULL if zName is not a
585 ** recognized system call name. NULL is also returned if the system call
586 ** is currently undefined.
588 static sqlite3_syscall_ptr
unixGetSystemCall(
589 sqlite3_vfs
*pNotUsed
,
594 UNUSED_PARAMETER(pNotUsed
);
595 for(i
=0; i
<sizeof(aSyscall
)/sizeof(aSyscall
[0]); i
++){
596 if( strcmp(zName
, aSyscall
[i
].zName
)==0 ) return aSyscall
[i
].pCurrent
;
602 ** Return the name of the first system call after zName. If zName==NULL
603 ** then return the name of the first system call. Return NULL if zName
604 ** is the last system call or if zName is not the name of a valid
607 static const char *unixNextSystemCall(sqlite3_vfs
*p
, const char *zName
){
612 for(i
=0; i
<ArraySize(aSyscall
)-1; i
++){
613 if( strcmp(zName
, aSyscall
[i
].zName
)==0 ) break;
616 for(i
++; i
<ArraySize(aSyscall
); i
++){
617 if( aSyscall
[i
].pCurrent
!=0 ) return aSyscall
[i
].zName
;
623 ** Do not accept any file descriptor less than this value, in order to avoid
624 ** opening database file using file descriptors that are commonly used for
625 ** standard input, output, and error.
627 #ifndef SQLITE_MINIMUM_FILE_DESCRIPTOR
628 # define SQLITE_MINIMUM_FILE_DESCRIPTOR 3
632 ** Invoke open(). Do so multiple times, until it either succeeds or
633 ** fails for some reason other than EINTR.
635 ** If the file creation mode "m" is 0 then set it to the default for
636 ** SQLite. The default is SQLITE_DEFAULT_FILE_PERMISSIONS (normally
637 ** 0644) as modified by the system umask. If m is not 0, then
638 ** make the file creation mode be exactly m ignoring the umask.
640 ** The m parameter will be non-zero only when creating -wal, -journal,
641 ** and -shm files. We want those files to have *exactly* the same
642 ** permissions as their original database, unadulterated by the umask.
643 ** In that way, if a database file is -rw-rw-rw or -rw-rw-r-, and a
644 ** transaction crashes and leaves behind hot journals, then any
645 ** process that is able to write to the database will also be able to
646 ** recover the hot journals.
648 static int robust_open(const char *z
, int f
, mode_t m
){
650 mode_t m2
= m
? m
: SQLITE_DEFAULT_FILE_PERMISSIONS
;
652 #if defined(O_CLOEXEC)
653 fd
= osOpen(z
,f
|O_CLOEXEC
,m2
);
658 if( errno
==EINTR
) continue;
661 if( fd
>=SQLITE_MINIMUM_FILE_DESCRIPTOR
) break;
663 sqlite3_log(SQLITE_WARNING
,
664 "attempt to open \"%s\" as file descriptor %d", z
, fd
);
666 if( osOpen("/dev/null", f
, m
)<0 ) break;
671 if( osFstat(fd
, &statbuf
)==0
672 && statbuf
.st_size
==0
673 && (statbuf
.st_mode
&0777)!=m
678 #if defined(FD_CLOEXEC) && (!defined(O_CLOEXEC) || O_CLOEXEC==0)
679 osFcntl(fd
, F_SETFD
, osFcntl(fd
, F_GETFD
, 0) | FD_CLOEXEC
);
686 ** Helper functions to obtain and relinquish the global mutex. The
687 ** global mutex is used to protect the unixInodeInfo and
688 ** vxworksFileId objects used by this file, all of which may be
689 ** shared by multiple threads.
691 ** Function unixMutexHeld() is used to assert() that the global mutex
692 ** is held when required. This function is only used as part of assert()
696 ** assert( unixMutexHeld() );
699 static sqlite3_mutex
*unixBigLock
= 0;
700 static void unixEnterMutex(void){
701 sqlite3_mutex_enter(unixBigLock
);
703 static void unixLeaveMutex(void){
704 sqlite3_mutex_leave(unixBigLock
);
707 static int unixMutexHeld(void) {
708 return sqlite3_mutex_held(unixBigLock
);
713 #ifdef SQLITE_HAVE_OS_TRACE
715 ** Helper function for printing out trace information from debugging
716 ** binaries. This returns the string representation of the supplied
717 ** integer lock-type.
719 static const char *azFileLock(int eFileLock
){
721 case NO_LOCK
: return "NONE";
722 case SHARED_LOCK
: return "SHARED";
723 case RESERVED_LOCK
: return "RESERVED";
724 case PENDING_LOCK
: return "PENDING";
725 case EXCLUSIVE_LOCK
: return "EXCLUSIVE";
731 #ifdef SQLITE_LOCK_TRACE
733 ** Print out information about all locking operations.
735 ** This routine is used for troubleshooting locks on multithreaded
736 ** platforms. Enable by compiling with the -DSQLITE_LOCK_TRACE
737 ** command-line option on the compiler. This code is normally
740 static int lockTrace(int fd
, int op
, struct flock
*p
){
741 char *zOpName
, *zType
;
746 }else if( op
==F_SETLK
){
749 s
= osFcntl(fd
, op
, p
);
750 sqlite3DebugPrintf("fcntl unknown %d %d %d\n", fd
, op
, s
);
753 if( p
->l_type
==F_RDLCK
){
755 }else if( p
->l_type
==F_WRLCK
){
757 }else if( p
->l_type
==F_UNLCK
){
762 assert( p
->l_whence
==SEEK_SET
);
763 s
= osFcntl(fd
, op
, p
);
765 sqlite3DebugPrintf("fcntl %d %d %s %s %d %d %d %d\n",
766 threadid
, fd
, zOpName
, zType
, (int)p
->l_start
, (int)p
->l_len
,
768 if( s
==(-1) && op
==F_SETLK
&& (p
->l_type
==F_RDLCK
|| p
->l_type
==F_WRLCK
) ){
771 osFcntl(fd
, F_GETLK
, &l2
);
772 if( l2
.l_type
==F_RDLCK
){
774 }else if( l2
.l_type
==F_WRLCK
){
776 }else if( l2
.l_type
==F_UNLCK
){
781 sqlite3DebugPrintf("fcntl-failure-reason: %s %d %d %d\n",
782 zType
, (int)l2
.l_start
, (int)l2
.l_len
, (int)l2
.l_pid
);
788 #define osFcntl lockTrace
789 #endif /* SQLITE_LOCK_TRACE */
792 ** Retry ftruncate() calls that fail due to EINTR
794 ** All calls to ftruncate() within this file should be made through
795 ** this wrapper. On the Android platform, bypassing the logic below
796 ** could lead to a corrupt database.
798 static int robust_ftruncate(int h
, sqlite3_int64 sz
){
801 /* On Android, ftruncate() always uses 32-bit offsets, even if
802 ** _FILE_OFFSET_BITS=64 is defined. This means it is unsafe to attempt to
803 ** truncate a file to any size larger than 2GiB. Silently ignore any
805 if( sz
>(sqlite3_int64
)0x7FFFFFFF ){
809 do{ rc
= osFtruncate(h
,sz
); }while( rc
<0 && errno
==EINTR
);
814 ** This routine translates a standard POSIX errno code into something
815 ** useful to the clients of the sqlite3 functions. Specifically, it is
816 ** intended to translate a variety of "try again" errors into SQLITE_BUSY
817 ** and a variety of "please close the file descriptor NOW" errors into
820 ** Errors during initialization of locks, or file system support for locks,
821 ** should handle ENOLCK, ENOTSUP, EOPNOTSUPP separately.
823 static int sqliteErrorFromPosixError(int posixError
, int sqliteIOErr
) {
824 assert( (sqliteIOErr
== SQLITE_IOERR_LOCK
) ||
825 (sqliteIOErr
== SQLITE_IOERR_UNLOCK
) ||
826 (sqliteIOErr
== SQLITE_IOERR_RDLOCK
) ||
827 (sqliteIOErr
== SQLITE_IOERR_CHECKRESERVEDLOCK
) );
828 switch (posixError
) {
835 /* random NFS retry error, unless during file system support
836 * introspection, in which it actually means what it says */
848 /******************************************************************************
849 ****************** Begin Unique File ID Utility Used By VxWorks ***************
851 ** On most versions of unix, we can get a unique ID for a file by concatenating
852 ** the device number and the inode number. But this does not work on VxWorks.
853 ** On VxWorks, a unique file id must be based on the canonical filename.
855 ** A pointer to an instance of the following structure can be used as a
856 ** unique file ID in VxWorks. Each instance of this structure contains
857 ** a copy of the canonical filename. There is also a reference count.
858 ** The structure is reclaimed when the number of pointers to it drops to
861 ** There are never very many files open at one time and lookups are not
862 ** a performance-critical path, so it is sufficient to put these
863 ** structures on a linked list.
865 struct vxworksFileId
{
866 struct vxworksFileId
*pNext
; /* Next in a list of them all */
867 int nRef
; /* Number of references to this one */
868 int nName
; /* Length of the zCanonicalName[] string */
869 char *zCanonicalName
; /* Canonical filename */
874 ** All unique filenames are held on a linked list headed by this
877 static struct vxworksFileId
*vxworksFileList
= 0;
880 ** Simplify a filename into its canonical form
881 ** by making the following changes:
883 ** * removing any trailing and duplicate /
884 ** * convert /./ into just /
885 ** * convert /A/../ where A is any simple name into just /
887 ** Changes are made in-place. Return the new name length.
889 ** The original filename is in z[0..n-1]. Return the number of
890 ** characters in the simplified name.
892 static int vxworksSimplifyName(char *z
, int n
){
894 while( n
>1 && z
[n
-1]=='/' ){ n
--; }
895 for(i
=j
=0; i
<n
; i
++){
897 if( z
[i
+1]=='/' ) continue;
898 if( z
[i
+1]=='.' && i
+2<n
&& z
[i
+2]=='/' ){
902 if( z
[i
+1]=='.' && i
+3<n
&& z
[i
+2]=='.' && z
[i
+3]=='/' ){
903 while( j
>0 && z
[j
-1]!='/' ){ j
--; }
916 ** Find a unique file ID for the given absolute pathname. Return
917 ** a pointer to the vxworksFileId object. This pointer is the unique
920 ** The nRef field of the vxworksFileId object is incremented before
921 ** the object is returned. A new vxworksFileId object is created
922 ** and added to the global list if necessary.
924 ** If a memory allocation error occurs, return NULL.
926 static struct vxworksFileId
*vxworksFindFileId(const char *zAbsoluteName
){
927 struct vxworksFileId
*pNew
; /* search key and new file ID */
928 struct vxworksFileId
*pCandidate
; /* For looping over existing file IDs */
929 int n
; /* Length of zAbsoluteName string */
931 assert( zAbsoluteName
[0]=='/' );
932 n
= (int)strlen(zAbsoluteName
);
933 pNew
= sqlite3_malloc64( sizeof(*pNew
) + (n
+1) );
934 if( pNew
==0 ) return 0;
935 pNew
->zCanonicalName
= (char*)&pNew
[1];
936 memcpy(pNew
->zCanonicalName
, zAbsoluteName
, n
+1);
937 n
= vxworksSimplifyName(pNew
->zCanonicalName
, n
);
939 /* Search for an existing entry that matching the canonical name.
940 ** If found, increment the reference count and return a pointer to
941 ** the existing file ID.
944 for(pCandidate
=vxworksFileList
; pCandidate
; pCandidate
=pCandidate
->pNext
){
945 if( pCandidate
->nName
==n
946 && memcmp(pCandidate
->zCanonicalName
, pNew
->zCanonicalName
, n
)==0
955 /* No match was found. We will make a new file ID */
958 pNew
->pNext
= vxworksFileList
;
959 vxworksFileList
= pNew
;
965 ** Decrement the reference count on a vxworksFileId object. Free
966 ** the object when the reference count reaches zero.
968 static void vxworksReleaseFileId(struct vxworksFileId
*pId
){
970 assert( pId
->nRef
>0 );
973 struct vxworksFileId
**pp
;
974 for(pp
=&vxworksFileList
; *pp
&& *pp
!=pId
; pp
= &((*pp
)->pNext
)){}
981 #endif /* OS_VXWORKS */
982 /*************** End of Unique File ID Utility Used By VxWorks ****************
983 ******************************************************************************/
986 /******************************************************************************
987 *************************** Posix Advisory Locking ****************************
989 ** POSIX advisory locks are broken by design. ANSI STD 1003.1 (1996)
990 ** section 6.5.2.2 lines 483 through 490 specify that when a process
991 ** sets or clears a lock, that operation overrides any prior locks set
992 ** by the same process. It does not explicitly say so, but this implies
993 ** that it overrides locks set by the same process using a different
994 ** file descriptor. Consider this test case:
996 ** int fd1 = open("./file1", O_RDWR|O_CREAT, 0644);
997 ** int fd2 = open("./file2", O_RDWR|O_CREAT, 0644);
999 ** Suppose ./file1 and ./file2 are really the same file (because
1000 ** one is a hard or symbolic link to the other) then if you set
1001 ** an exclusive lock on fd1, then try to get an exclusive lock
1002 ** on fd2, it works. I would have expected the second lock to
1003 ** fail since there was already a lock on the file due to fd1.
1004 ** But not so. Since both locks came from the same process, the
1005 ** second overrides the first, even though they were on different
1006 ** file descriptors opened on different file names.
1008 ** This means that we cannot use POSIX locks to synchronize file access
1009 ** among competing threads of the same process. POSIX locks will work fine
1010 ** to synchronize access for threads in separate processes, but not
1011 ** threads within the same process.
1013 ** To work around the problem, SQLite has to manage file locks internally
1014 ** on its own. Whenever a new database is opened, we have to find the
1015 ** specific inode of the database file (the inode is determined by the
1016 ** st_dev and st_ino fields of the stat structure that fstat() fills in)
1017 ** and check for locks already existing on that inode. When locks are
1018 ** created or removed, we have to look at our own internal record of the
1019 ** locks to see if another thread has previously set a lock on that same
1022 ** (Aside: The use of inode numbers as unique IDs does not work on VxWorks.
1023 ** For VxWorks, we have to use the alternative unique ID system based on
1024 ** canonical filename and implemented in the previous division.)
1026 ** The sqlite3_file structure for POSIX is no longer just an integer file
1027 ** descriptor. It is now a structure that holds the integer file
1028 ** descriptor and a pointer to a structure that describes the internal
1029 ** locks on the corresponding inode. There is one locking structure
1030 ** per inode, so if the same inode is opened twice, both unixFile structures
1031 ** point to the same locking structure. The locking structure keeps
1032 ** a reference count (so we will know when to delete it) and a "cnt"
1033 ** field that tells us its internal lock status. cnt==0 means the
1034 ** file is unlocked. cnt==-1 means the file has an exclusive lock.
1035 ** cnt>0 means there are cnt shared locks on the file.
1037 ** Any attempt to lock or unlock a file first checks the locking
1038 ** structure. The fcntl() system call is only invoked to set a
1039 ** POSIX lock if the internal lock structure transitions between
1040 ** a locked and an unlocked state.
1042 ** But wait: there are yet more problems with POSIX advisory locks.
1044 ** If you close a file descriptor that points to a file that has locks,
1045 ** all locks on that file that are owned by the current process are
1046 ** released. To work around this problem, each unixInodeInfo object
1047 ** maintains a count of the number of pending locks on tha inode.
1048 ** When an attempt is made to close an unixFile, if there are
1049 ** other unixFile open on the same inode that are holding locks, the call
1050 ** to close() the file descriptor is deferred until all of the locks clear.
1051 ** The unixInodeInfo structure keeps a list of file descriptors that need to
1052 ** be closed and that list is walked (and cleared) when the last lock
1055 ** Yet another problem: LinuxThreads do not play well with posix locks.
1057 ** Many older versions of linux use the LinuxThreads library which is
1058 ** not posix compliant. Under LinuxThreads, a lock created by thread
1059 ** A cannot be modified or overridden by a different thread B.
1060 ** Only thread A can modify the lock. Locking behavior is correct
1061 ** if the appliation uses the newer Native Posix Thread Library (NPTL)
1062 ** on linux - with NPTL a lock created by thread A can override locks
1063 ** in thread B. But there is no way to know at compile-time which
1064 ** threading library is being used. So there is no way to know at
1065 ** compile-time whether or not thread A can override locks on thread B.
1066 ** One has to do a run-time check to discover the behavior of the
1069 ** SQLite used to support LinuxThreads. But support for LinuxThreads
1070 ** was dropped beginning with version 3.7.0. SQLite will still work with
1071 ** LinuxThreads provided that (1) there is no more than one connection
1072 ** per database file in the same process and (2) database connections
1073 ** do not move across threads.
1077 ** An instance of the following structure serves as the key used
1078 ** to locate a particular unixInodeInfo object.
1081 dev_t dev
; /* Device number */
1083 struct vxworksFileId
*pId
; /* Unique file ID for vxworks. */
1085 /* We are told that some versions of Android contain a bug that
1086 ** sizes ino_t at only 32-bits instead of 64-bits. (See
1087 ** https://android-review.googlesource.com/#/c/115351/3/dist/sqlite3.c)
1088 ** To work around this, always allocate 64-bits for the inode number.
1089 ** On small machines that only have 32-bit inodes, this wastes 4 bytes,
1090 ** but that should not be a big deal. */
1091 /* WAS: ino_t ino; */
1092 u64 ino
; /* Inode number */
1097 ** An instance of the following structure is allocated for each open
1098 ** inode. Or, on LinuxThreads, there is one of these structures for
1099 ** each inode opened by each thread.
1101 ** A single inode can have multiple file descriptors, so each unixFile
1102 ** structure contains a pointer to an instance of this object and this
1103 ** object keeps a count of the number of unixFile pointing to it.
1105 struct unixInodeInfo
{
1106 struct unixFileId fileId
; /* The lookup key */
1107 int nShared
; /* Number of SHARED locks held */
1108 unsigned char eFileLock
; /* One of SHARED_LOCK, RESERVED_LOCK etc. */
1109 unsigned char bProcessLock
; /* An exclusive process lock is held */
1110 int nRef
; /* Number of pointers to this structure */
1111 unixShmNode
*pShmNode
; /* Shared memory associated with this inode */
1112 int nLock
; /* Number of outstanding file locks */
1113 UnixUnusedFd
*pUnused
; /* Unused file descriptors to close */
1114 unixInodeInfo
*pNext
; /* List of all unixInodeInfo objects */
1115 unixInodeInfo
*pPrev
; /* .... doubly linked */
1116 #if SQLITE_ENABLE_LOCKING_STYLE
1117 unsigned long long sharedByte
; /* for AFP simulated shared lock */
1120 sem_t
*pSem
; /* Named POSIX semaphore */
1121 char aSemName
[MAX_PATHNAME
+2]; /* Name of that semaphore */
1126 ** A lists of all unixInodeInfo objects.
1128 static unixInodeInfo
*inodeList
= 0; /* All unixInodeInfo objects */
1129 static unsigned int nUnusedFd
= 0; /* Total unused file descriptors */
1133 ** This function - unixLogErrorAtLine(), is only ever called via the macro
1136 ** It is invoked after an error occurs in an OS function and errno has been
1137 ** set. It logs a message using sqlite3_log() containing the current value of
1138 ** errno and, if possible, the human-readable equivalent from strerror() or
1141 ** The first argument passed to the macro should be the error code that
1142 ** will be returned to SQLite (e.g. SQLITE_IOERR_DELETE, SQLITE_CANTOPEN).
1143 ** The two subsequent arguments should be the name of the OS function that
1144 ** failed (e.g. "unlink", "open") and the associated file-system path,
1147 #define unixLogError(a,b,c) unixLogErrorAtLine(a,b,c,__LINE__)
1148 static int unixLogErrorAtLine(
1149 int errcode
, /* SQLite error code */
1150 const char *zFunc
, /* Name of OS function that failed */
1151 const char *zPath
, /* File path associated with error */
1152 int iLine
/* Source line number where error occurred */
1154 char *zErr
; /* Message from strerror() or equivalent */
1155 int iErrno
= errno
; /* Saved syscall error number */
1157 /* If this is not a threadsafe build (SQLITE_THREADSAFE==0), then use
1158 ** the strerror() function to obtain the human-readable error message
1159 ** equivalent to errno. Otherwise, use strerror_r().
1161 #if SQLITE_THREADSAFE && defined(HAVE_STRERROR_R)
1163 memset(aErr
, 0, sizeof(aErr
));
1166 /* If STRERROR_R_CHAR_P (set by autoconf scripts) or __USE_GNU is defined,
1167 ** assume that the system provides the GNU version of strerror_r() that
1168 ** returns a pointer to a buffer containing the error message. That pointer
1169 ** may point to aErr[], or it may point to some static storage somewhere.
1170 ** Otherwise, assume that the system provides the POSIX version of
1171 ** strerror_r(), which always writes an error message into aErr[].
1173 ** If the code incorrectly assumes that it is the POSIX version that is
1174 ** available, the error message will often be an empty string. Not a
1175 ** huge problem. Incorrectly concluding that the GNU version is available
1176 ** could lead to a segfault though.
1178 #if defined(STRERROR_R_CHAR_P) || defined(__USE_GNU)
1181 strerror_r(iErrno
, aErr
, sizeof(aErr
)-1);
1183 #elif SQLITE_THREADSAFE
1184 /* This is a threadsafe build, but strerror_r() is not available. */
1187 /* Non-threadsafe build, use strerror(). */
1188 zErr
= strerror(iErrno
);
1191 if( zPath
==0 ) zPath
= "";
1192 sqlite3_log(errcode
,
1193 "os_unix.c:%d: (%d) %s(%s) - %s",
1194 iLine
, iErrno
, zFunc
, zPath
, zErr
1201 ** Close a file descriptor.
1203 ** We assume that close() almost always works, since it is only in a
1204 ** very sick application or on a very sick platform that it might fail.
1205 ** If it does fail, simply leak the file descriptor, but do log the
1208 ** Note that it is not safe to retry close() after EINTR since the
1209 ** file descriptor might have already been reused by another thread.
1210 ** So we don't even try to recover from an EINTR. Just log the error
1213 static void robust_close(unixFile
*pFile
, int h
, int lineno
){
1215 unixLogErrorAtLine(SQLITE_IOERR_CLOSE
, "close",
1216 pFile
? pFile
->zPath
: 0, lineno
);
1221 ** Set the pFile->lastErrno. Do this in a subroutine as that provides
1222 ** a convenient place to set a breakpoint.
1224 static void storeLastErrno(unixFile
*pFile
, int error
){
1225 pFile
->lastErrno
= error
;
1229 ** Close all file descriptors accumuated in the unixInodeInfo->pUnused list.
1231 static void closePendingFds(unixFile
*pFile
){
1232 unixInodeInfo
*pInode
= pFile
->pInode
;
1234 UnixUnusedFd
*pNext
;
1235 for(p
=pInode
->pUnused
; p
; p
=pNext
){
1237 robust_close(pFile
, p
->fd
, __LINE__
);
1241 pInode
->pUnused
= 0;
1245 ** Release a unixInodeInfo structure previously allocated by findInodeInfo().
1247 ** The mutex entered using the unixEnterMutex() function must be held
1248 ** when this function is called.
1250 static void releaseInodeInfo(unixFile
*pFile
){
1251 unixInodeInfo
*pInode
= pFile
->pInode
;
1252 assert( unixMutexHeld() );
1253 if( ALWAYS(pInode
) ){
1255 if( pInode
->nRef
==0 ){
1256 assert( pInode
->pShmNode
==0 );
1257 closePendingFds(pFile
);
1258 if( pInode
->pPrev
){
1259 assert( pInode
->pPrev
->pNext
==pInode
);
1260 pInode
->pPrev
->pNext
= pInode
->pNext
;
1262 assert( inodeList
==pInode
);
1263 inodeList
= pInode
->pNext
;
1265 if( pInode
->pNext
){
1266 assert( pInode
->pNext
->pPrev
==pInode
);
1267 pInode
->pNext
->pPrev
= pInode
->pPrev
;
1269 sqlite3_free(pInode
);
1272 assert( inodeList
!=0 || nUnusedFd
==0 );
1276 ** Given a file descriptor, locate the unixInodeInfo object that
1277 ** describes that file descriptor. Create a new one if necessary. The
1278 ** return value might be uninitialized if an error occurs.
1280 ** The mutex entered using the unixEnterMutex() function must be held
1281 ** when this function is called.
1283 ** Return an appropriate error code.
1285 static int findInodeInfo(
1286 unixFile
*pFile
, /* Unix file with file desc used in the key */
1287 unixInodeInfo
**ppInode
/* Return the unixInodeInfo object here */
1289 int rc
; /* System call return code */
1290 int fd
; /* The file descriptor for pFile */
1291 struct unixFileId fileId
; /* Lookup key for the unixInodeInfo */
1292 struct stat statbuf
; /* Low-level file information */
1293 unixInodeInfo
*pInode
= 0; /* Candidate unixInodeInfo object */
1295 assert( unixMutexHeld() );
1297 /* Get low-level information about the file that we can used to
1298 ** create a unique name for the file.
1301 rc
= osFstat(fd
, &statbuf
);
1303 storeLastErrno(pFile
, errno
);
1304 #if defined(EOVERFLOW) && defined(SQLITE_DISABLE_LFS)
1305 if( pFile
->lastErrno
==EOVERFLOW
) return SQLITE_NOLFS
;
1307 return SQLITE_IOERR
;
1311 /* On OS X on an msdos filesystem, the inode number is reported
1312 ** incorrectly for zero-size files. See ticket #3260. To work
1313 ** around this problem (we consider it a bug in OS X, not SQLite)
1314 ** we always increase the file size to 1 by writing a single byte
1315 ** prior to accessing the inode number. The one byte written is
1316 ** an ASCII 'S' character which also happens to be the first byte
1317 ** in the header of every SQLite database. In this way, if there
1318 ** is a race condition such that another thread has already populated
1319 ** the first page of the database, no damage is done.
1321 if( statbuf
.st_size
==0 && (pFile
->fsFlags
& SQLITE_FSFLAGS_IS_MSDOS
)!=0 ){
1322 do{ rc
= osWrite(fd
, "S", 1); }while( rc
<0 && errno
==EINTR
);
1324 storeLastErrno(pFile
, errno
);
1325 return SQLITE_IOERR
;
1327 rc
= osFstat(fd
, &statbuf
);
1329 storeLastErrno(pFile
, errno
);
1330 return SQLITE_IOERR
;
1335 memset(&fileId
, 0, sizeof(fileId
));
1336 fileId
.dev
= statbuf
.st_dev
;
1338 fileId
.pId
= pFile
->pId
;
1340 fileId
.ino
= (u64
)statbuf
.st_ino
;
1342 assert( inodeList
!=0 || nUnusedFd
==0 );
1344 while( pInode
&& memcmp(&fileId
, &pInode
->fileId
, sizeof(fileId
)) ){
1345 pInode
= pInode
->pNext
;
1348 pInode
= sqlite3_malloc64( sizeof(*pInode
) );
1350 return SQLITE_NOMEM_BKPT
;
1352 memset(pInode
, 0, sizeof(*pInode
));
1353 memcpy(&pInode
->fileId
, &fileId
, sizeof(fileId
));
1355 pInode
->pNext
= inodeList
;
1357 if( inodeList
) inodeList
->pPrev
= pInode
;
1367 ** Return TRUE if pFile has been renamed or unlinked since it was first opened.
1369 static int fileHasMoved(unixFile
*pFile
){
1371 return pFile
->pInode
!=0 && pFile
->pId
!=pFile
->pInode
->fileId
.pId
;
1374 return pFile
->pInode
!=0 &&
1375 (osStat(pFile
->zPath
, &buf
)!=0
1376 || (u64
)buf
.st_ino
!=pFile
->pInode
->fileId
.ino
);
1382 ** Check a unixFile that is a database. Verify the following:
1384 ** (1) There is exactly one hard link on the file
1385 ** (2) The file is not a symbolic link
1386 ** (3) The file has not been renamed or unlinked
1388 ** Issue sqlite3_log(SQLITE_WARNING,...) messages if anything is not right.
1390 static void verifyDbFile(unixFile
*pFile
){
1394 /* These verifications occurs for the main database only */
1395 if( pFile
->ctrlFlags
& UNIXFILE_NOLOCK
) return;
1397 rc
= osFstat(pFile
->h
, &buf
);
1399 sqlite3_log(SQLITE_WARNING
, "cannot fstat db file %s", pFile
->zPath
);
1402 if( buf
.st_nlink
==0 ){
1403 sqlite3_log(SQLITE_WARNING
, "file unlinked while open: %s", pFile
->zPath
);
1406 if( buf
.st_nlink
>1 ){
1407 sqlite3_log(SQLITE_WARNING
, "multiple links to file: %s", pFile
->zPath
);
1410 if( fileHasMoved(pFile
) ){
1411 sqlite3_log(SQLITE_WARNING
, "file renamed while open: %s", pFile
->zPath
);
1418 ** This routine checks if there is a RESERVED lock held on the specified
1419 ** file by this or any other process. If such a lock is held, set *pResOut
1420 ** to a non-zero value otherwise *pResOut is set to zero. The return value
1421 ** is set to SQLITE_OK unless an I/O error occurs during lock checking.
1423 static int unixCheckReservedLock(sqlite3_file
*id
, int *pResOut
){
1426 unixFile
*pFile
= (unixFile
*)id
;
1428 SimulateIOError( return SQLITE_IOERR_CHECKRESERVEDLOCK
; );
1431 assert( pFile
->eFileLock
<=SHARED_LOCK
);
1432 unixEnterMutex(); /* Because pFile->pInode is shared across threads */
1434 /* Check if a thread in this process holds such a lock */
1435 if( pFile
->pInode
->eFileLock
>SHARED_LOCK
){
1439 /* Otherwise see if some other process holds it.
1442 if( !reserved
&& !pFile
->pInode
->bProcessLock
){
1444 lock
.l_whence
= SEEK_SET
;
1445 lock
.l_start
= RESERVED_BYTE
;
1447 lock
.l_type
= F_WRLCK
;
1448 if( osFcntl(pFile
->h
, F_GETLK
, &lock
) ){
1449 rc
= SQLITE_IOERR_CHECKRESERVEDLOCK
;
1450 storeLastErrno(pFile
, errno
);
1451 } else if( lock
.l_type
!=F_UNLCK
){
1458 OSTRACE(("TEST WR-LOCK %d %d %d (unix)\n", pFile
->h
, rc
, reserved
));
1460 *pResOut
= reserved
;
1465 ** Attempt to set a system-lock on the file pFile. The lock is
1466 ** described by pLock.
1468 ** If the pFile was opened read/write from unix-excl, then the only lock
1469 ** ever obtained is an exclusive lock, and it is obtained exactly once
1470 ** the first time any lock is attempted. All subsequent system locking
1471 ** operations become no-ops. Locking operations still happen internally,
1472 ** in order to coordinate access between separate database connections
1473 ** within this process, but all of that is handled in memory and the
1474 ** operating system does not participate.
1476 ** This function is a pass-through to fcntl(F_SETLK) if pFile is using
1477 ** any VFS other than "unix-excl" or if pFile is opened on "unix-excl"
1478 ** and is read-only.
1480 ** Zero is returned if the call completes successfully, or -1 if a call
1481 ** to fcntl() fails. In this case, errno is set appropriately (by fcntl()).
1483 static int unixFileLock(unixFile
*pFile
, struct flock
*pLock
){
1485 unixInodeInfo
*pInode
= pFile
->pInode
;
1486 assert( unixMutexHeld() );
1487 assert( pInode
!=0 );
1488 if( (pFile
->ctrlFlags
& (UNIXFILE_EXCL
|UNIXFILE_RDONLY
))==UNIXFILE_EXCL
){
1489 if( pInode
->bProcessLock
==0 ){
1491 assert( pInode
->nLock
==0 );
1492 lock
.l_whence
= SEEK_SET
;
1493 lock
.l_start
= SHARED_FIRST
;
1494 lock
.l_len
= SHARED_SIZE
;
1495 lock
.l_type
= F_WRLCK
;
1496 rc
= osFcntl(pFile
->h
, F_SETLK
, &lock
);
1497 if( rc
<0 ) return rc
;
1498 pInode
->bProcessLock
= 1;
1504 rc
= osFcntl(pFile
->h
, F_SETLK
, pLock
);
1510 ** Lock the file with the lock specified by parameter eFileLock - one
1511 ** of the following:
1514 ** (2) RESERVED_LOCK
1516 ** (4) EXCLUSIVE_LOCK
1518 ** Sometimes when requesting one lock state, additional lock states
1519 ** are inserted in between. The locking might fail on one of the later
1520 ** transitions leaving the lock state different from what it started but
1521 ** still short of its goal. The following chart shows the allowed
1522 ** transitions and the inserted intermediate states:
1524 ** UNLOCKED -> SHARED
1525 ** SHARED -> RESERVED
1526 ** SHARED -> (PENDING) -> EXCLUSIVE
1527 ** RESERVED -> (PENDING) -> EXCLUSIVE
1528 ** PENDING -> EXCLUSIVE
1530 ** This routine will only increase a lock. Use the sqlite3OsUnlock()
1531 ** routine to lower a locking level.
1533 static int unixLock(sqlite3_file
*id
, int eFileLock
){
1534 /* The following describes the implementation of the various locks and
1535 ** lock transitions in terms of the POSIX advisory shared and exclusive
1536 ** lock primitives (called read-locks and write-locks below, to avoid
1537 ** confusion with SQLite lock names). The algorithms are complicated
1538 ** slightly in order to be compatible with Windows95 systems simultaneously
1539 ** accessing the same database file, in case that is ever required.
1541 ** Symbols defined in os.h indentify the 'pending byte' and the 'reserved
1542 ** byte', each single bytes at well known offsets, and the 'shared byte
1543 ** range', a range of 510 bytes at a well known offset.
1545 ** To obtain a SHARED lock, a read-lock is obtained on the 'pending
1546 ** byte'. If this is successful, 'shared byte range' is read-locked
1547 ** and the lock on the 'pending byte' released. (Legacy note: When
1548 ** SQLite was first developed, Windows95 systems were still very common,
1549 ** and Widnows95 lacks a shared-lock capability. So on Windows95, a
1550 ** single randomly selected by from the 'shared byte range' is locked.
1551 ** Windows95 is now pretty much extinct, but this work-around for the
1552 ** lack of shared-locks on Windows95 lives on, for backwards
1555 ** A process may only obtain a RESERVED lock after it has a SHARED lock.
1556 ** A RESERVED lock is implemented by grabbing a write-lock on the
1559 ** A process may only obtain a PENDING lock after it has obtained a
1560 ** SHARED lock. A PENDING lock is implemented by obtaining a write-lock
1561 ** on the 'pending byte'. This ensures that no new SHARED locks can be
1562 ** obtained, but existing SHARED locks are allowed to persist. A process
1563 ** does not have to obtain a RESERVED lock on the way to a PENDING lock.
1564 ** This property is used by the algorithm for rolling back a journal file
1567 ** An EXCLUSIVE lock, obtained after a PENDING lock is held, is
1568 ** implemented by obtaining a write-lock on the entire 'shared byte
1569 ** range'. Since all other locks require a read-lock on one of the bytes
1570 ** within this range, this ensures that no other locks are held on the
1574 unixFile
*pFile
= (unixFile
*)id
;
1575 unixInodeInfo
*pInode
;
1580 OSTRACE(("LOCK %d %s was %s(%s,%d) pid=%d (unix)\n", pFile
->h
,
1581 azFileLock(eFileLock
), azFileLock(pFile
->eFileLock
),
1582 azFileLock(pFile
->pInode
->eFileLock
), pFile
->pInode
->nShared
,
1585 /* If there is already a lock of this type or more restrictive on the
1586 ** unixFile, do nothing. Don't use the end_lock: exit path, as
1587 ** unixEnterMutex() hasn't been called yet.
1589 if( pFile
->eFileLock
>=eFileLock
){
1590 OSTRACE(("LOCK %d %s ok (already held) (unix)\n", pFile
->h
,
1591 azFileLock(eFileLock
)));
1595 /* Make sure the locking sequence is correct.
1596 ** (1) We never move from unlocked to anything higher than shared lock.
1597 ** (2) SQLite never explicitly requests a pendig lock.
1598 ** (3) A shared lock is always held when a reserve lock is requested.
1600 assert( pFile
->eFileLock
!=NO_LOCK
|| eFileLock
==SHARED_LOCK
);
1601 assert( eFileLock
!=PENDING_LOCK
);
1602 assert( eFileLock
!=RESERVED_LOCK
|| pFile
->eFileLock
==SHARED_LOCK
);
1604 /* This mutex is needed because pFile->pInode is shared across threads
1607 pInode
= pFile
->pInode
;
1609 /* If some thread using this PID has a lock via a different unixFile*
1610 ** handle that precludes the requested lock, return BUSY.
1612 if( (pFile
->eFileLock
!=pInode
->eFileLock
&&
1613 (pInode
->eFileLock
>=PENDING_LOCK
|| eFileLock
>SHARED_LOCK
))
1619 /* If a SHARED lock is requested, and some thread using this PID already
1620 ** has a SHARED or RESERVED lock, then increment reference counts and
1621 ** return SQLITE_OK.
1623 if( eFileLock
==SHARED_LOCK
&&
1624 (pInode
->eFileLock
==SHARED_LOCK
|| pInode
->eFileLock
==RESERVED_LOCK
) ){
1625 assert( eFileLock
==SHARED_LOCK
);
1626 assert( pFile
->eFileLock
==0 );
1627 assert( pInode
->nShared
>0 );
1628 pFile
->eFileLock
= SHARED_LOCK
;
1635 /* A PENDING lock is needed before acquiring a SHARED lock and before
1636 ** acquiring an EXCLUSIVE lock. For the SHARED lock, the PENDING will
1640 lock
.l_whence
= SEEK_SET
;
1641 if( eFileLock
==SHARED_LOCK
1642 || (eFileLock
==EXCLUSIVE_LOCK
&& pFile
->eFileLock
<PENDING_LOCK
)
1644 lock
.l_type
= (eFileLock
==SHARED_LOCK
?F_RDLCK
:F_WRLCK
);
1645 lock
.l_start
= PENDING_BYTE
;
1646 if( unixFileLock(pFile
, &lock
) ){
1648 rc
= sqliteErrorFromPosixError(tErrno
, SQLITE_IOERR_LOCK
);
1649 if( rc
!=SQLITE_BUSY
){
1650 storeLastErrno(pFile
, tErrno
);
1657 /* If control gets to this point, then actually go ahead and make
1658 ** operating system calls for the specified lock.
1660 if( eFileLock
==SHARED_LOCK
){
1661 assert( pInode
->nShared
==0 );
1662 assert( pInode
->eFileLock
==0 );
1663 assert( rc
==SQLITE_OK
);
1665 /* Now get the read-lock */
1666 lock
.l_start
= SHARED_FIRST
;
1667 lock
.l_len
= SHARED_SIZE
;
1668 if( unixFileLock(pFile
, &lock
) ){
1670 rc
= sqliteErrorFromPosixError(tErrno
, SQLITE_IOERR_LOCK
);
1673 /* Drop the temporary PENDING lock */
1674 lock
.l_start
= PENDING_BYTE
;
1676 lock
.l_type
= F_UNLCK
;
1677 if( unixFileLock(pFile
, &lock
) && rc
==SQLITE_OK
){
1678 /* This could happen with a network mount */
1680 rc
= SQLITE_IOERR_UNLOCK
;
1684 if( rc
!=SQLITE_BUSY
){
1685 storeLastErrno(pFile
, tErrno
);
1689 pFile
->eFileLock
= SHARED_LOCK
;
1691 pInode
->nShared
= 1;
1693 }else if( eFileLock
==EXCLUSIVE_LOCK
&& pInode
->nShared
>1 ){
1694 /* We are trying for an exclusive lock but another thread in this
1695 ** same process is still holding a shared lock. */
1698 /* The request was for a RESERVED or EXCLUSIVE lock. It is
1699 ** assumed that there is a SHARED or greater lock on the file
1702 assert( 0!=pFile
->eFileLock
);
1703 lock
.l_type
= F_WRLCK
;
1705 assert( eFileLock
==RESERVED_LOCK
|| eFileLock
==EXCLUSIVE_LOCK
);
1706 if( eFileLock
==RESERVED_LOCK
){
1707 lock
.l_start
= RESERVED_BYTE
;
1710 lock
.l_start
= SHARED_FIRST
;
1711 lock
.l_len
= SHARED_SIZE
;
1714 if( unixFileLock(pFile
, &lock
) ){
1716 rc
= sqliteErrorFromPosixError(tErrno
, SQLITE_IOERR_LOCK
);
1717 if( rc
!=SQLITE_BUSY
){
1718 storeLastErrno(pFile
, tErrno
);
1725 /* Set up the transaction-counter change checking flags when
1726 ** transitioning from a SHARED to a RESERVED lock. The change
1727 ** from SHARED to RESERVED marks the beginning of a normal
1728 ** write operation (not a hot journal rollback).
1731 && pFile
->eFileLock
<=SHARED_LOCK
1732 && eFileLock
==RESERVED_LOCK
1734 pFile
->transCntrChng
= 0;
1735 pFile
->dbUpdate
= 0;
1736 pFile
->inNormalWrite
= 1;
1741 if( rc
==SQLITE_OK
){
1742 pFile
->eFileLock
= eFileLock
;
1743 pInode
->eFileLock
= eFileLock
;
1744 }else if( eFileLock
==EXCLUSIVE_LOCK
){
1745 pFile
->eFileLock
= PENDING_LOCK
;
1746 pInode
->eFileLock
= PENDING_LOCK
;
1751 OSTRACE(("LOCK %d %s %s (unix)\n", pFile
->h
, azFileLock(eFileLock
),
1752 rc
==SQLITE_OK
? "ok" : "failed"));
1757 ** Add the file descriptor used by file handle pFile to the corresponding
1760 static void setPendingFd(unixFile
*pFile
){
1761 unixInodeInfo
*pInode
= pFile
->pInode
;
1762 UnixUnusedFd
*p
= pFile
->pPreallocatedUnused
;
1763 p
->pNext
= pInode
->pUnused
;
1764 pInode
->pUnused
= p
;
1766 pFile
->pPreallocatedUnused
= 0;
1771 ** Lower the locking level on file descriptor pFile to eFileLock. eFileLock
1772 ** must be either NO_LOCK or SHARED_LOCK.
1774 ** If the locking level of the file descriptor is already at or below
1775 ** the requested locking level, this routine is a no-op.
1777 ** If handleNFSUnlock is true, then on downgrading an EXCLUSIVE_LOCK to SHARED
1778 ** the byte range is divided into 2 parts and the first part is unlocked then
1779 ** set to a read lock, then the other part is simply unlocked. This works
1780 ** around a bug in BSD NFS lockd (also seen on MacOSX 10.3+) that fails to
1781 ** remove the write lock on a region when a read lock is set.
1783 static int posixUnlock(sqlite3_file
*id
, int eFileLock
, int handleNFSUnlock
){
1784 unixFile
*pFile
= (unixFile
*)id
;
1785 unixInodeInfo
*pInode
;
1790 OSTRACE(("UNLOCK %d %d was %d(%d,%d) pid=%d (unix)\n", pFile
->h
, eFileLock
,
1791 pFile
->eFileLock
, pFile
->pInode
->eFileLock
, pFile
->pInode
->nShared
,
1794 assert( eFileLock
<=SHARED_LOCK
);
1795 if( pFile
->eFileLock
<=eFileLock
){
1799 pInode
= pFile
->pInode
;
1800 assert( pInode
->nShared
!=0 );
1801 if( pFile
->eFileLock
>SHARED_LOCK
){
1802 assert( pInode
->eFileLock
==pFile
->eFileLock
);
1805 /* When reducing a lock such that other processes can start
1806 ** reading the database file again, make sure that the
1807 ** transaction counter was updated if any part of the database
1808 ** file changed. If the transaction counter is not updated,
1809 ** other connections to the same file might not realize that
1810 ** the file has changed and hence might not know to flush their
1811 ** cache. The use of a stale cache can lead to database corruption.
1813 pFile
->inNormalWrite
= 0;
1816 /* downgrading to a shared lock on NFS involves clearing the write lock
1817 ** before establishing the readlock - to avoid a race condition we downgrade
1818 ** the lock in 2 blocks, so that part of the range will be covered by a
1819 ** write lock until the rest is covered by a read lock:
1825 if( eFileLock
==SHARED_LOCK
){
1826 #if !defined(__APPLE__) || !SQLITE_ENABLE_LOCKING_STYLE
1827 (void)handleNFSUnlock
;
1828 assert( handleNFSUnlock
==0 );
1830 #if defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE
1831 if( handleNFSUnlock
){
1832 int tErrno
; /* Error code from system call errors */
1833 off_t divSize
= SHARED_SIZE
- 1;
1835 lock
.l_type
= F_UNLCK
;
1836 lock
.l_whence
= SEEK_SET
;
1837 lock
.l_start
= SHARED_FIRST
;
1838 lock
.l_len
= divSize
;
1839 if( unixFileLock(pFile
, &lock
)==(-1) ){
1841 rc
= SQLITE_IOERR_UNLOCK
;
1842 storeLastErrno(pFile
, tErrno
);
1845 lock
.l_type
= F_RDLCK
;
1846 lock
.l_whence
= SEEK_SET
;
1847 lock
.l_start
= SHARED_FIRST
;
1848 lock
.l_len
= divSize
;
1849 if( unixFileLock(pFile
, &lock
)==(-1) ){
1851 rc
= sqliteErrorFromPosixError(tErrno
, SQLITE_IOERR_RDLOCK
);
1852 if( IS_LOCK_ERROR(rc
) ){
1853 storeLastErrno(pFile
, tErrno
);
1857 lock
.l_type
= F_UNLCK
;
1858 lock
.l_whence
= SEEK_SET
;
1859 lock
.l_start
= SHARED_FIRST
+divSize
;
1860 lock
.l_len
= SHARED_SIZE
-divSize
;
1861 if( unixFileLock(pFile
, &lock
)==(-1) ){
1863 rc
= SQLITE_IOERR_UNLOCK
;
1864 storeLastErrno(pFile
, tErrno
);
1868 #endif /* defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE */
1870 lock
.l_type
= F_RDLCK
;
1871 lock
.l_whence
= SEEK_SET
;
1872 lock
.l_start
= SHARED_FIRST
;
1873 lock
.l_len
= SHARED_SIZE
;
1874 if( unixFileLock(pFile
, &lock
) ){
1875 /* In theory, the call to unixFileLock() cannot fail because another
1876 ** process is holding an incompatible lock. If it does, this
1877 ** indicates that the other process is not following the locking
1878 ** protocol. If this happens, return SQLITE_IOERR_RDLOCK. Returning
1879 ** SQLITE_BUSY would confuse the upper layer (in practice it causes
1880 ** an assert to fail). */
1881 rc
= SQLITE_IOERR_RDLOCK
;
1882 storeLastErrno(pFile
, errno
);
1887 lock
.l_type
= F_UNLCK
;
1888 lock
.l_whence
= SEEK_SET
;
1889 lock
.l_start
= PENDING_BYTE
;
1890 lock
.l_len
= 2L; assert( PENDING_BYTE
+1==RESERVED_BYTE
);
1891 if( unixFileLock(pFile
, &lock
)==0 ){
1892 pInode
->eFileLock
= SHARED_LOCK
;
1894 rc
= SQLITE_IOERR_UNLOCK
;
1895 storeLastErrno(pFile
, errno
);
1899 if( eFileLock
==NO_LOCK
){
1900 /* Decrement the shared lock counter. Release the lock using an
1901 ** OS call only when all threads in this same process have released
1905 if( pInode
->nShared
==0 ){
1906 lock
.l_type
= F_UNLCK
;
1907 lock
.l_whence
= SEEK_SET
;
1908 lock
.l_start
= lock
.l_len
= 0L;
1909 if( unixFileLock(pFile
, &lock
)==0 ){
1910 pInode
->eFileLock
= NO_LOCK
;
1912 rc
= SQLITE_IOERR_UNLOCK
;
1913 storeLastErrno(pFile
, errno
);
1914 pInode
->eFileLock
= NO_LOCK
;
1915 pFile
->eFileLock
= NO_LOCK
;
1919 /* Decrement the count of locks against this same file. When the
1920 ** count reaches zero, close any other file descriptors whose close
1921 ** was deferred because of outstanding locks.
1924 assert( pInode
->nLock
>=0 );
1925 if( pInode
->nLock
==0 ){
1926 closePendingFds(pFile
);
1932 if( rc
==SQLITE_OK
) pFile
->eFileLock
= eFileLock
;
1937 ** Lower the locking level on file descriptor pFile to eFileLock. eFileLock
1938 ** must be either NO_LOCK or SHARED_LOCK.
1940 ** If the locking level of the file descriptor is already at or below
1941 ** the requested locking level, this routine is a no-op.
1943 static int unixUnlock(sqlite3_file
*id
, int eFileLock
){
1944 #if SQLITE_MAX_MMAP_SIZE>0
1945 assert( eFileLock
==SHARED_LOCK
|| ((unixFile
*)id
)->nFetchOut
==0 );
1947 return posixUnlock(id
, eFileLock
, 0);
1950 #if SQLITE_MAX_MMAP_SIZE>0
1951 static int unixMapfile(unixFile
*pFd
, i64 nByte
);
1952 static void unixUnmapfile(unixFile
*pFd
);
1956 ** This function performs the parts of the "close file" operation
1957 ** common to all locking schemes. It closes the directory and file
1958 ** handles, if they are valid, and sets all fields of the unixFile
1961 ** It is *not* necessary to hold the mutex when this routine is called,
1962 ** even on VxWorks. A mutex will be acquired on VxWorks by the
1963 ** vxworksReleaseFileId() routine.
1965 static int closeUnixFile(sqlite3_file
*id
){
1966 unixFile
*pFile
= (unixFile
*)id
;
1967 #if SQLITE_MAX_MMAP_SIZE>0
1968 unixUnmapfile(pFile
);
1971 robust_close(pFile
, pFile
->h
, __LINE__
);
1976 if( pFile
->ctrlFlags
& UNIXFILE_DELETE
){
1977 osUnlink(pFile
->pId
->zCanonicalName
);
1979 vxworksReleaseFileId(pFile
->pId
);
1983 #ifdef SQLITE_UNLINK_AFTER_CLOSE
1984 if( pFile
->ctrlFlags
& UNIXFILE_DELETE
){
1985 osUnlink(pFile
->zPath
);
1986 sqlite3_free(*(char**)&pFile
->zPath
);
1990 OSTRACE(("CLOSE %-3d\n", pFile
->h
));
1992 sqlite3_free(pFile
->pPreallocatedUnused
);
1993 memset(pFile
, 0, sizeof(unixFile
));
2000 static int unixClose(sqlite3_file
*id
){
2002 unixFile
*pFile
= (unixFile
*)id
;
2003 verifyDbFile(pFile
);
2004 unixUnlock(id
, NO_LOCK
);
2007 /* unixFile.pInode is always valid here. Otherwise, a different close
2008 ** routine (e.g. nolockClose()) would be called instead.
2010 assert( pFile
->pInode
->nLock
>0 || pFile
->pInode
->bProcessLock
==0 );
2011 if( ALWAYS(pFile
->pInode
) && pFile
->pInode
->nLock
){
2012 /* If there are outstanding locks, do not actually close the file just
2013 ** yet because that would clear those locks. Instead, add the file
2014 ** descriptor to pInode->pUnused list. It will be automatically closed
2015 ** when the last lock is cleared.
2017 setPendingFd(pFile
);
2019 releaseInodeInfo(pFile
);
2020 rc
= closeUnixFile(id
);
2025 /************** End of the posix advisory lock implementation *****************
2026 ******************************************************************************/
2028 /******************************************************************************
2029 ****************************** No-op Locking **********************************
2031 ** Of the various locking implementations available, this is by far the
2032 ** simplest: locking is ignored. No attempt is made to lock the database
2033 ** file for reading or writing.
2035 ** This locking mode is appropriate for use on read-only databases
2036 ** (ex: databases that are burned into CD-ROM, for example.) It can
2037 ** also be used if the application employs some external mechanism to
2038 ** prevent simultaneous access of the same database by two or more
2039 ** database connections. But there is a serious risk of database
2040 ** corruption if this locking mode is used in situations where multiple
2041 ** database connections are accessing the same database file at the same
2042 ** time and one or more of those connections are writing.
2045 static int nolockCheckReservedLock(sqlite3_file
*NotUsed
, int *pResOut
){
2046 UNUSED_PARAMETER(NotUsed
);
2050 static int nolockLock(sqlite3_file
*NotUsed
, int NotUsed2
){
2051 UNUSED_PARAMETER2(NotUsed
, NotUsed2
);
2054 static int nolockUnlock(sqlite3_file
*NotUsed
, int NotUsed2
){
2055 UNUSED_PARAMETER2(NotUsed
, NotUsed2
);
2062 static int nolockClose(sqlite3_file
*id
) {
2063 return closeUnixFile(id
);
2066 /******************* End of the no-op lock implementation *********************
2067 ******************************************************************************/
2069 /******************************************************************************
2070 ************************* Begin dot-file Locking ******************************
2072 ** The dotfile locking implementation uses the existence of separate lock
2073 ** files (really a directory) to control access to the database. This works
2074 ** on just about every filesystem imaginable. But there are serious downsides:
2076 ** (1) There is zero concurrency. A single reader blocks all other
2077 ** connections from reading or writing the database.
2079 ** (2) An application crash or power loss can leave stale lock files
2080 ** sitting around that need to be cleared manually.
2082 ** Nevertheless, a dotlock is an appropriate locking mode for use if no
2083 ** other locking strategy is available.
2085 ** Dotfile locking works by creating a subdirectory in the same directory as
2086 ** the database and with the same name but with a ".lock" extension added.
2087 ** The existence of a lock directory implies an EXCLUSIVE lock. All other
2088 ** lock types (SHARED, RESERVED, PENDING) are mapped into EXCLUSIVE.
2092 ** The file suffix added to the data base filename in order to create the
2095 #define DOTLOCK_SUFFIX ".lock"
2098 ** This routine checks if there is a RESERVED lock held on the specified
2099 ** file by this or any other process. If such a lock is held, set *pResOut
2100 ** to a non-zero value otherwise *pResOut is set to zero. The return value
2101 ** is set to SQLITE_OK unless an I/O error occurs during lock checking.
2103 ** In dotfile locking, either a lock exists or it does not. So in this
2104 ** variation of CheckReservedLock(), *pResOut is set to true if any lock
2105 ** is held on the file and false if the file is unlocked.
2107 static int dotlockCheckReservedLock(sqlite3_file
*id
, int *pResOut
) {
2110 unixFile
*pFile
= (unixFile
*)id
;
2112 SimulateIOError( return SQLITE_IOERR_CHECKRESERVEDLOCK
; );
2115 reserved
= osAccess((const char*)pFile
->lockingContext
, 0)==0;
2116 OSTRACE(("TEST WR-LOCK %d %d %d (dotlock)\n", pFile
->h
, rc
, reserved
));
2117 *pResOut
= reserved
;
2122 ** Lock the file with the lock specified by parameter eFileLock - one
2123 ** of the following:
2126 ** (2) RESERVED_LOCK
2128 ** (4) EXCLUSIVE_LOCK
2130 ** Sometimes when requesting one lock state, additional lock states
2131 ** are inserted in between. The locking might fail on one of the later
2132 ** transitions leaving the lock state different from what it started but
2133 ** still short of its goal. The following chart shows the allowed
2134 ** transitions and the inserted intermediate states:
2136 ** UNLOCKED -> SHARED
2137 ** SHARED -> RESERVED
2138 ** SHARED -> (PENDING) -> EXCLUSIVE
2139 ** RESERVED -> (PENDING) -> EXCLUSIVE
2140 ** PENDING -> EXCLUSIVE
2142 ** This routine will only increase a lock. Use the sqlite3OsUnlock()
2143 ** routine to lower a locking level.
2145 ** With dotfile locking, we really only support state (4): EXCLUSIVE.
2146 ** But we track the other locking levels internally.
2148 static int dotlockLock(sqlite3_file
*id
, int eFileLock
) {
2149 unixFile
*pFile
= (unixFile
*)id
;
2150 char *zLockFile
= (char *)pFile
->lockingContext
;
2154 /* If we have any lock, then the lock file already exists. All we have
2155 ** to do is adjust our internal record of the lock level.
2157 if( pFile
->eFileLock
> NO_LOCK
){
2158 pFile
->eFileLock
= eFileLock
;
2159 /* Always update the timestamp on the old file */
2161 utime(zLockFile
, NULL
);
2163 utimes(zLockFile
, NULL
);
2168 /* grab an exclusive lock */
2169 rc
= osMkdir(zLockFile
, 0777);
2171 /* failed to open/create the lock directory */
2173 if( EEXIST
== tErrno
){
2176 rc
= sqliteErrorFromPosixError(tErrno
, SQLITE_IOERR_LOCK
);
2177 if( rc
!=SQLITE_BUSY
){
2178 storeLastErrno(pFile
, tErrno
);
2184 /* got it, set the type and return ok */
2185 pFile
->eFileLock
= eFileLock
;
2190 ** Lower the locking level on file descriptor pFile to eFileLock. eFileLock
2191 ** must be either NO_LOCK or SHARED_LOCK.
2193 ** If the locking level of the file descriptor is already at or below
2194 ** the requested locking level, this routine is a no-op.
2196 ** When the locking level reaches NO_LOCK, delete the lock file.
2198 static int dotlockUnlock(sqlite3_file
*id
, int eFileLock
) {
2199 unixFile
*pFile
= (unixFile
*)id
;
2200 char *zLockFile
= (char *)pFile
->lockingContext
;
2204 OSTRACE(("UNLOCK %d %d was %d pid=%d (dotlock)\n", pFile
->h
, eFileLock
,
2205 pFile
->eFileLock
, osGetpid(0)));
2206 assert( eFileLock
<=SHARED_LOCK
);
2208 /* no-op if possible */
2209 if( pFile
->eFileLock
==eFileLock
){
2213 /* To downgrade to shared, simply update our internal notion of the
2214 ** lock state. No need to mess with the file on disk.
2216 if( eFileLock
==SHARED_LOCK
){
2217 pFile
->eFileLock
= SHARED_LOCK
;
2221 /* To fully unlock the database, delete the lock file */
2222 assert( eFileLock
==NO_LOCK
);
2223 rc
= osRmdir(zLockFile
);
2226 if( tErrno
==ENOENT
){
2229 rc
= SQLITE_IOERR_UNLOCK
;
2230 storeLastErrno(pFile
, tErrno
);
2234 pFile
->eFileLock
= NO_LOCK
;
2239 ** Close a file. Make sure the lock has been released before closing.
2241 static int dotlockClose(sqlite3_file
*id
) {
2242 unixFile
*pFile
= (unixFile
*)id
;
2244 dotlockUnlock(id
, NO_LOCK
);
2245 sqlite3_free(pFile
->lockingContext
);
2246 return closeUnixFile(id
);
2248 /****************** End of the dot-file lock implementation *******************
2249 ******************************************************************************/
2251 /******************************************************************************
2252 ************************** Begin flock Locking ********************************
2254 ** Use the flock() system call to do file locking.
2256 ** flock() locking is like dot-file locking in that the various
2257 ** fine-grain locking levels supported by SQLite are collapsed into
2258 ** a single exclusive lock. In other words, SHARED, RESERVED, and
2259 ** PENDING locks are the same thing as an EXCLUSIVE lock. SQLite
2260 ** still works when you do this, but concurrency is reduced since
2261 ** only a single process can be reading the database at a time.
2263 ** Omit this section if SQLITE_ENABLE_LOCKING_STYLE is turned off
2265 #if SQLITE_ENABLE_LOCKING_STYLE
2268 ** Retry flock() calls that fail with EINTR
2271 static int robust_flock(int fd
, int op
){
2273 do{ rc
= flock(fd
,op
); }while( rc
<0 && errno
==EINTR
);
2277 # define robust_flock(a,b) flock(a,b)
2282 ** This routine checks if there is a RESERVED lock held on the specified
2283 ** file by this or any other process. If such a lock is held, set *pResOut
2284 ** to a non-zero value otherwise *pResOut is set to zero. The return value
2285 ** is set to SQLITE_OK unless an I/O error occurs during lock checking.
2287 static int flockCheckReservedLock(sqlite3_file
*id
, int *pResOut
){
2290 unixFile
*pFile
= (unixFile
*)id
;
2292 SimulateIOError( return SQLITE_IOERR_CHECKRESERVEDLOCK
; );
2296 /* Check if a thread in this process holds such a lock */
2297 if( pFile
->eFileLock
>SHARED_LOCK
){
2301 /* Otherwise see if some other process holds it. */
2303 /* attempt to get the lock */
2304 int lrc
= robust_flock(pFile
->h
, LOCK_EX
| LOCK_NB
);
2306 /* got the lock, unlock it */
2307 lrc
= robust_flock(pFile
->h
, LOCK_UN
);
2310 /* unlock failed with an error */
2311 lrc
= SQLITE_IOERR_UNLOCK
;
2312 storeLastErrno(pFile
, tErrno
);
2318 /* someone else might have it reserved */
2319 lrc
= sqliteErrorFromPosixError(tErrno
, SQLITE_IOERR_LOCK
);
2320 if( IS_LOCK_ERROR(lrc
) ){
2321 storeLastErrno(pFile
, tErrno
);
2326 OSTRACE(("TEST WR-LOCK %d %d %d (flock)\n", pFile
->h
, rc
, reserved
));
2328 #ifdef SQLITE_IGNORE_FLOCK_LOCK_ERRORS
2329 if( (rc
& 0xff) == SQLITE_IOERR
){
2333 #endif /* SQLITE_IGNORE_FLOCK_LOCK_ERRORS */
2334 *pResOut
= reserved
;
2339 ** Lock the file with the lock specified by parameter eFileLock - one
2340 ** of the following:
2343 ** (2) RESERVED_LOCK
2345 ** (4) EXCLUSIVE_LOCK
2347 ** Sometimes when requesting one lock state, additional lock states
2348 ** are inserted in between. The locking might fail on one of the later
2349 ** transitions leaving the lock state different from what it started but
2350 ** still short of its goal. The following chart shows the allowed
2351 ** transitions and the inserted intermediate states:
2353 ** UNLOCKED -> SHARED
2354 ** SHARED -> RESERVED
2355 ** SHARED -> (PENDING) -> EXCLUSIVE
2356 ** RESERVED -> (PENDING) -> EXCLUSIVE
2357 ** PENDING -> EXCLUSIVE
2359 ** flock() only really support EXCLUSIVE locks. We track intermediate
2360 ** lock states in the sqlite3_file structure, but all locks SHARED or
2361 ** above are really EXCLUSIVE locks and exclude all other processes from
2364 ** This routine will only increase a lock. Use the sqlite3OsUnlock()
2365 ** routine to lower a locking level.
2367 static int flockLock(sqlite3_file
*id
, int eFileLock
) {
2369 unixFile
*pFile
= (unixFile
*)id
;
2373 /* if we already have a lock, it is exclusive.
2374 ** Just adjust level and punt on outta here. */
2375 if (pFile
->eFileLock
> NO_LOCK
) {
2376 pFile
->eFileLock
= eFileLock
;
2380 /* grab an exclusive lock */
2382 if (robust_flock(pFile
->h
, LOCK_EX
| LOCK_NB
)) {
2384 /* didn't get, must be busy */
2385 rc
= sqliteErrorFromPosixError(tErrno
, SQLITE_IOERR_LOCK
);
2386 if( IS_LOCK_ERROR(rc
) ){
2387 storeLastErrno(pFile
, tErrno
);
2390 /* got it, set the type and return ok */
2391 pFile
->eFileLock
= eFileLock
;
2393 OSTRACE(("LOCK %d %s %s (flock)\n", pFile
->h
, azFileLock(eFileLock
),
2394 rc
==SQLITE_OK
? "ok" : "failed"));
2395 #ifdef SQLITE_IGNORE_FLOCK_LOCK_ERRORS
2396 if( (rc
& 0xff) == SQLITE_IOERR
){
2399 #endif /* SQLITE_IGNORE_FLOCK_LOCK_ERRORS */
2405 ** Lower the locking level on file descriptor pFile to eFileLock. eFileLock
2406 ** must be either NO_LOCK or SHARED_LOCK.
2408 ** If the locking level of the file descriptor is already at or below
2409 ** the requested locking level, this routine is a no-op.
2411 static int flockUnlock(sqlite3_file
*id
, int eFileLock
) {
2412 unixFile
*pFile
= (unixFile
*)id
;
2415 OSTRACE(("UNLOCK %d %d was %d pid=%d (flock)\n", pFile
->h
, eFileLock
,
2416 pFile
->eFileLock
, osGetpid(0)));
2417 assert( eFileLock
<=SHARED_LOCK
);
2419 /* no-op if possible */
2420 if( pFile
->eFileLock
==eFileLock
){
2424 /* shared can just be set because we always have an exclusive */
2425 if (eFileLock
==SHARED_LOCK
) {
2426 pFile
->eFileLock
= eFileLock
;
2430 /* no, really, unlock. */
2431 if( robust_flock(pFile
->h
, LOCK_UN
) ){
2432 #ifdef SQLITE_IGNORE_FLOCK_LOCK_ERRORS
2434 #endif /* SQLITE_IGNORE_FLOCK_LOCK_ERRORS */
2435 return SQLITE_IOERR_UNLOCK
;
2437 pFile
->eFileLock
= NO_LOCK
;
2445 static int flockClose(sqlite3_file
*id
) {
2447 flockUnlock(id
, NO_LOCK
);
2448 return closeUnixFile(id
);
2451 #endif /* SQLITE_ENABLE_LOCKING_STYLE && !OS_VXWORK */
2453 /******************* End of the flock lock implementation *********************
2454 ******************************************************************************/
2456 /******************************************************************************
2457 ************************ Begin Named Semaphore Locking ************************
2459 ** Named semaphore locking is only supported on VxWorks.
2461 ** Semaphore locking is like dot-lock and flock in that it really only
2462 ** supports EXCLUSIVE locking. Only a single process can read or write
2463 ** the database file at a time. This reduces potential concurrency, but
2464 ** makes the lock implementation much easier.
2469 ** This routine checks if there is a RESERVED lock held on the specified
2470 ** file by this or any other process. If such a lock is held, set *pResOut
2471 ** to a non-zero value otherwise *pResOut is set to zero. The return value
2472 ** is set to SQLITE_OK unless an I/O error occurs during lock checking.
2474 static int semXCheckReservedLock(sqlite3_file
*id
, int *pResOut
) {
2477 unixFile
*pFile
= (unixFile
*)id
;
2479 SimulateIOError( return SQLITE_IOERR_CHECKRESERVEDLOCK
; );
2483 /* Check if a thread in this process holds such a lock */
2484 if( pFile
->eFileLock
>SHARED_LOCK
){
2488 /* Otherwise see if some other process holds it. */
2490 sem_t
*pSem
= pFile
->pInode
->pSem
;
2492 if( sem_trywait(pSem
)==-1 ){
2494 if( EAGAIN
!= tErrno
){
2495 rc
= sqliteErrorFromPosixError(tErrno
, SQLITE_IOERR_CHECKRESERVEDLOCK
);
2496 storeLastErrno(pFile
, tErrno
);
2498 /* someone else has the lock when we are in NO_LOCK */
2499 reserved
= (pFile
->eFileLock
< SHARED_LOCK
);
2502 /* we could have it if we want it */
2506 OSTRACE(("TEST WR-LOCK %d %d %d (sem)\n", pFile
->h
, rc
, reserved
));
2508 *pResOut
= reserved
;
2513 ** Lock the file with the lock specified by parameter eFileLock - one
2514 ** of the following:
2517 ** (2) RESERVED_LOCK
2519 ** (4) EXCLUSIVE_LOCK
2521 ** Sometimes when requesting one lock state, additional lock states
2522 ** are inserted in between. The locking might fail on one of the later
2523 ** transitions leaving the lock state different from what it started but
2524 ** still short of its goal. The following chart shows the allowed
2525 ** transitions and the inserted intermediate states:
2527 ** UNLOCKED -> SHARED
2528 ** SHARED -> RESERVED
2529 ** SHARED -> (PENDING) -> EXCLUSIVE
2530 ** RESERVED -> (PENDING) -> EXCLUSIVE
2531 ** PENDING -> EXCLUSIVE
2533 ** Semaphore locks only really support EXCLUSIVE locks. We track intermediate
2534 ** lock states in the sqlite3_file structure, but all locks SHARED or
2535 ** above are really EXCLUSIVE locks and exclude all other processes from
2538 ** This routine will only increase a lock. Use the sqlite3OsUnlock()
2539 ** routine to lower a locking level.
2541 static int semXLock(sqlite3_file
*id
, int eFileLock
) {
2542 unixFile
*pFile
= (unixFile
*)id
;
2543 sem_t
*pSem
= pFile
->pInode
->pSem
;
2546 /* if we already have a lock, it is exclusive.
2547 ** Just adjust level and punt on outta here. */
2548 if (pFile
->eFileLock
> NO_LOCK
) {
2549 pFile
->eFileLock
= eFileLock
;
2554 /* lock semaphore now but bail out when already locked. */
2555 if( sem_trywait(pSem
)==-1 ){
2560 /* got it, set the type and return ok */
2561 pFile
->eFileLock
= eFileLock
;
2568 ** Lower the locking level on file descriptor pFile to eFileLock. eFileLock
2569 ** must be either NO_LOCK or SHARED_LOCK.
2571 ** If the locking level of the file descriptor is already at or below
2572 ** the requested locking level, this routine is a no-op.
2574 static int semXUnlock(sqlite3_file
*id
, int eFileLock
) {
2575 unixFile
*pFile
= (unixFile
*)id
;
2576 sem_t
*pSem
= pFile
->pInode
->pSem
;
2580 OSTRACE(("UNLOCK %d %d was %d pid=%d (sem)\n", pFile
->h
, eFileLock
,
2581 pFile
->eFileLock
, osGetpid(0)));
2582 assert( eFileLock
<=SHARED_LOCK
);
2584 /* no-op if possible */
2585 if( pFile
->eFileLock
==eFileLock
){
2589 /* shared can just be set because we always have an exclusive */
2590 if (eFileLock
==SHARED_LOCK
) {
2591 pFile
->eFileLock
= eFileLock
;
2595 /* no, really unlock. */
2596 if ( sem_post(pSem
)==-1 ) {
2597 int rc
, tErrno
= errno
;
2598 rc
= sqliteErrorFromPosixError(tErrno
, SQLITE_IOERR_UNLOCK
);
2599 if( IS_LOCK_ERROR(rc
) ){
2600 storeLastErrno(pFile
, tErrno
);
2604 pFile
->eFileLock
= NO_LOCK
;
2611 static int semXClose(sqlite3_file
*id
) {
2613 unixFile
*pFile
= (unixFile
*)id
;
2614 semXUnlock(id
, NO_LOCK
);
2617 releaseInodeInfo(pFile
);
2624 #endif /* OS_VXWORKS */
2626 ** Named semaphore locking is only available on VxWorks.
2628 *************** End of the named semaphore lock implementation ****************
2629 ******************************************************************************/
2632 /******************************************************************************
2633 *************************** Begin AFP Locking *********************************
2635 ** AFP is the Apple Filing Protocol. AFP is a network filesystem found
2636 ** on Apple Macintosh computers - both OS9 and OSX.
2638 ** Third-party implementations of AFP are available. But this code here
2639 ** only works on OSX.
2642 #if defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE
2644 ** The afpLockingContext structure contains all afp lock specific state
2646 typedef struct afpLockingContext afpLockingContext
;
2647 struct afpLockingContext
{
2649 const char *dbPath
; /* Name of the open file */
2652 struct ByteRangeLockPB2
2654 unsigned long long offset
; /* offset to first byte to lock */
2655 unsigned long long length
; /* nbr of bytes to lock */
2656 unsigned long long retRangeStart
; /* nbr of 1st byte locked if successful */
2657 unsigned char unLockFlag
; /* 1 = unlock, 0 = lock */
2658 unsigned char startEndFlag
; /* 1=rel to end of fork, 0=rel to start */
2659 int fd
; /* file desc to assoc this lock with */
2662 #define afpfsByteRangeLock2FSCTL _IOWR('z', 23, struct ByteRangeLockPB2)
2665 ** This is a utility for setting or clearing a bit-range lock on an
2668 ** Return SQLITE_OK on success, SQLITE_BUSY on failure.
2670 static int afpSetLock(
2671 const char *path
, /* Name of the file to be locked or unlocked */
2672 unixFile
*pFile
, /* Open file descriptor on path */
2673 unsigned long long offset
, /* First byte to be locked */
2674 unsigned long long length
, /* Number of bytes to lock */
2675 int setLockFlag
/* True to set lock. False to clear lock */
2677 struct ByteRangeLockPB2 pb
;
2680 pb
.unLockFlag
= setLockFlag
? 0 : 1;
2681 pb
.startEndFlag
= 0;
2686 OSTRACE(("AFPSETLOCK [%s] for %d%s in range %llx:%llx\n",
2687 (setLockFlag
?"ON":"OFF"), pFile
->h
, (pb
.fd
==-1?"[testval-1]":""),
2689 err
= fsctl(path
, afpfsByteRangeLock2FSCTL
, &pb
, 0);
2693 OSTRACE(("AFPSETLOCK failed to fsctl() '%s' %d %s\n",
2694 path
, tErrno
, strerror(tErrno
)));
2695 #ifdef SQLITE_IGNORE_AFP_LOCK_ERRORS
2698 rc
= sqliteErrorFromPosixError(tErrno
,
2699 setLockFlag
? SQLITE_IOERR_LOCK
: SQLITE_IOERR_UNLOCK
);
2700 #endif /* SQLITE_IGNORE_AFP_LOCK_ERRORS */
2701 if( IS_LOCK_ERROR(rc
) ){
2702 storeLastErrno(pFile
, tErrno
);
2711 ** This routine checks if there is a RESERVED lock held on the specified
2712 ** file by this or any other process. If such a lock is held, set *pResOut
2713 ** to a non-zero value otherwise *pResOut is set to zero. The return value
2714 ** is set to SQLITE_OK unless an I/O error occurs during lock checking.
2716 static int afpCheckReservedLock(sqlite3_file
*id
, int *pResOut
){
2719 unixFile
*pFile
= (unixFile
*)id
;
2720 afpLockingContext
*context
;
2722 SimulateIOError( return SQLITE_IOERR_CHECKRESERVEDLOCK
; );
2725 context
= (afpLockingContext
*) pFile
->lockingContext
;
2726 if( context
->reserved
){
2730 unixEnterMutex(); /* Because pFile->pInode is shared across threads */
2732 /* Check if a thread in this process holds such a lock */
2733 if( pFile
->pInode
->eFileLock
>SHARED_LOCK
){
2737 /* Otherwise see if some other process holds it.
2740 /* lock the RESERVED byte */
2741 int lrc
= afpSetLock(context
->dbPath
, pFile
, RESERVED_BYTE
, 1,1);
2742 if( SQLITE_OK
==lrc
){
2743 /* if we succeeded in taking the reserved lock, unlock it to restore
2744 ** the original state */
2745 lrc
= afpSetLock(context
->dbPath
, pFile
, RESERVED_BYTE
, 1, 0);
2747 /* if we failed to get the lock then someone else must have it */
2750 if( IS_LOCK_ERROR(lrc
) ){
2756 OSTRACE(("TEST WR-LOCK %d %d %d (afp)\n", pFile
->h
, rc
, reserved
));
2758 *pResOut
= reserved
;
2763 ** Lock the file with the lock specified by parameter eFileLock - one
2764 ** of the following:
2767 ** (2) RESERVED_LOCK
2769 ** (4) EXCLUSIVE_LOCK
2771 ** Sometimes when requesting one lock state, additional lock states
2772 ** are inserted in between. The locking might fail on one of the later
2773 ** transitions leaving the lock state different from what it started but
2774 ** still short of its goal. The following chart shows the allowed
2775 ** transitions and the inserted intermediate states:
2777 ** UNLOCKED -> SHARED
2778 ** SHARED -> RESERVED
2779 ** SHARED -> (PENDING) -> EXCLUSIVE
2780 ** RESERVED -> (PENDING) -> EXCLUSIVE
2781 ** PENDING -> EXCLUSIVE
2783 ** This routine will only increase a lock. Use the sqlite3OsUnlock()
2784 ** routine to lower a locking level.
2786 static int afpLock(sqlite3_file
*id
, int eFileLock
){
2788 unixFile
*pFile
= (unixFile
*)id
;
2789 unixInodeInfo
*pInode
= pFile
->pInode
;
2790 afpLockingContext
*context
= (afpLockingContext
*) pFile
->lockingContext
;
2793 OSTRACE(("LOCK %d %s was %s(%s,%d) pid=%d (afp)\n", pFile
->h
,
2794 azFileLock(eFileLock
), azFileLock(pFile
->eFileLock
),
2795 azFileLock(pInode
->eFileLock
), pInode
->nShared
, osGetpid(0)));
2797 /* If there is already a lock of this type or more restrictive on the
2798 ** unixFile, do nothing. Don't use the afp_end_lock: exit path, as
2799 ** unixEnterMutex() hasn't been called yet.
2801 if( pFile
->eFileLock
>=eFileLock
){
2802 OSTRACE(("LOCK %d %s ok (already held) (afp)\n", pFile
->h
,
2803 azFileLock(eFileLock
)));
2807 /* Make sure the locking sequence is correct
2808 ** (1) We never move from unlocked to anything higher than shared lock.
2809 ** (2) SQLite never explicitly requests a pendig lock.
2810 ** (3) A shared lock is always held when a reserve lock is requested.
2812 assert( pFile
->eFileLock
!=NO_LOCK
|| eFileLock
==SHARED_LOCK
);
2813 assert( eFileLock
!=PENDING_LOCK
);
2814 assert( eFileLock
!=RESERVED_LOCK
|| pFile
->eFileLock
==SHARED_LOCK
);
2816 /* This mutex is needed because pFile->pInode is shared across threads
2819 pInode
= pFile
->pInode
;
2821 /* If some thread using this PID has a lock via a different unixFile*
2822 ** handle that precludes the requested lock, return BUSY.
2824 if( (pFile
->eFileLock
!=pInode
->eFileLock
&&
2825 (pInode
->eFileLock
>=PENDING_LOCK
|| eFileLock
>SHARED_LOCK
))
2831 /* If a SHARED lock is requested, and some thread using this PID already
2832 ** has a SHARED or RESERVED lock, then increment reference counts and
2833 ** return SQLITE_OK.
2835 if( eFileLock
==SHARED_LOCK
&&
2836 (pInode
->eFileLock
==SHARED_LOCK
|| pInode
->eFileLock
==RESERVED_LOCK
) ){
2837 assert( eFileLock
==SHARED_LOCK
);
2838 assert( pFile
->eFileLock
==0 );
2839 assert( pInode
->nShared
>0 );
2840 pFile
->eFileLock
= SHARED_LOCK
;
2846 /* A PENDING lock is needed before acquiring a SHARED lock and before
2847 ** acquiring an EXCLUSIVE lock. For the SHARED lock, the PENDING will
2850 if( eFileLock
==SHARED_LOCK
2851 || (eFileLock
==EXCLUSIVE_LOCK
&& pFile
->eFileLock
<PENDING_LOCK
)
2854 failed
= afpSetLock(context
->dbPath
, pFile
, PENDING_BYTE
, 1, 1);
2861 /* If control gets to this point, then actually go ahead and make
2862 ** operating system calls for the specified lock.
2864 if( eFileLock
==SHARED_LOCK
){
2865 int lrc1
, lrc2
, lrc1Errno
= 0;
2868 assert( pInode
->nShared
==0 );
2869 assert( pInode
->eFileLock
==0 );
2871 mask
= (sizeof(long)==8) ? LARGEST_INT64
: 0x7fffffff;
2872 /* Now get the read-lock SHARED_LOCK */
2873 /* note that the quality of the randomness doesn't matter that much */
2875 pInode
->sharedByte
= (lk
& mask
)%(SHARED_SIZE
- 1);
2876 lrc1
= afpSetLock(context
->dbPath
, pFile
,
2877 SHARED_FIRST
+pInode
->sharedByte
, 1, 1);
2878 if( IS_LOCK_ERROR(lrc1
) ){
2879 lrc1Errno
= pFile
->lastErrno
;
2881 /* Drop the temporary PENDING lock */
2882 lrc2
= afpSetLock(context
->dbPath
, pFile
, PENDING_BYTE
, 1, 0);
2884 if( IS_LOCK_ERROR(lrc1
) ) {
2885 storeLastErrno(pFile
, lrc1Errno
);
2888 } else if( IS_LOCK_ERROR(lrc2
) ){
2891 } else if( lrc1
!= SQLITE_OK
) {
2894 pFile
->eFileLock
= SHARED_LOCK
;
2896 pInode
->nShared
= 1;
2898 }else if( eFileLock
==EXCLUSIVE_LOCK
&& pInode
->nShared
>1 ){
2899 /* We are trying for an exclusive lock but another thread in this
2900 ** same process is still holding a shared lock. */
2903 /* The request was for a RESERVED or EXCLUSIVE lock. It is
2904 ** assumed that there is a SHARED or greater lock on the file
2908 assert( 0!=pFile
->eFileLock
);
2909 if (eFileLock
>= RESERVED_LOCK
&& pFile
->eFileLock
< RESERVED_LOCK
) {
2910 /* Acquire a RESERVED lock */
2911 failed
= afpSetLock(context
->dbPath
, pFile
, RESERVED_BYTE
, 1,1);
2913 context
->reserved
= 1;
2916 if (!failed
&& eFileLock
== EXCLUSIVE_LOCK
) {
2917 /* Acquire an EXCLUSIVE lock */
2919 /* Remove the shared lock before trying the range. we'll need to
2920 ** reestablish the shared lock if we can't get the afpUnlock
2922 if( !(failed
= afpSetLock(context
->dbPath
, pFile
, SHARED_FIRST
+
2923 pInode
->sharedByte
, 1, 0)) ){
2924 int failed2
= SQLITE_OK
;
2925 /* now attemmpt to get the exclusive lock range */
2926 failed
= afpSetLock(context
->dbPath
, pFile
, SHARED_FIRST
,
2928 if( failed
&& (failed2
= afpSetLock(context
->dbPath
, pFile
,
2929 SHARED_FIRST
+ pInode
->sharedByte
, 1, 1)) ){
2930 /* Can't reestablish the shared lock. Sqlite can't deal, this is
2931 ** a critical I/O error
2933 rc
= ((failed
& 0xff) == SQLITE_IOERR
) ? failed2
:
2946 if( rc
==SQLITE_OK
){
2947 pFile
->eFileLock
= eFileLock
;
2948 pInode
->eFileLock
= eFileLock
;
2949 }else if( eFileLock
==EXCLUSIVE_LOCK
){
2950 pFile
->eFileLock
= PENDING_LOCK
;
2951 pInode
->eFileLock
= PENDING_LOCK
;
2956 OSTRACE(("LOCK %d %s %s (afp)\n", pFile
->h
, azFileLock(eFileLock
),
2957 rc
==SQLITE_OK
? "ok" : "failed"));
2962 ** Lower the locking level on file descriptor pFile to eFileLock. eFileLock
2963 ** must be either NO_LOCK or SHARED_LOCK.
2965 ** If the locking level of the file descriptor is already at or below
2966 ** the requested locking level, this routine is a no-op.
2968 static int afpUnlock(sqlite3_file
*id
, int eFileLock
) {
2970 unixFile
*pFile
= (unixFile
*)id
;
2971 unixInodeInfo
*pInode
;
2972 afpLockingContext
*context
= (afpLockingContext
*) pFile
->lockingContext
;
2979 OSTRACE(("UNLOCK %d %d was %d(%d,%d) pid=%d (afp)\n", pFile
->h
, eFileLock
,
2980 pFile
->eFileLock
, pFile
->pInode
->eFileLock
, pFile
->pInode
->nShared
,
2983 assert( eFileLock
<=SHARED_LOCK
);
2984 if( pFile
->eFileLock
<=eFileLock
){
2988 pInode
= pFile
->pInode
;
2989 assert( pInode
->nShared
!=0 );
2990 if( pFile
->eFileLock
>SHARED_LOCK
){
2991 assert( pInode
->eFileLock
==pFile
->eFileLock
);
2992 SimulateIOErrorBenign(1);
2993 SimulateIOError( h
=(-1) )
2994 SimulateIOErrorBenign(0);
2997 /* When reducing a lock such that other processes can start
2998 ** reading the database file again, make sure that the
2999 ** transaction counter was updated if any part of the database
3000 ** file changed. If the transaction counter is not updated,
3001 ** other connections to the same file might not realize that
3002 ** the file has changed and hence might not know to flush their
3003 ** cache. The use of a stale cache can lead to database corruption.
3005 assert( pFile
->inNormalWrite
==0
3006 || pFile
->dbUpdate
==0
3007 || pFile
->transCntrChng
==1 );
3008 pFile
->inNormalWrite
= 0;
3011 if( pFile
->eFileLock
==EXCLUSIVE_LOCK
){
3012 rc
= afpSetLock(context
->dbPath
, pFile
, SHARED_FIRST
, SHARED_SIZE
, 0);
3013 if( rc
==SQLITE_OK
&& (eFileLock
==SHARED_LOCK
|| pInode
->nShared
>1) ){
3014 /* only re-establish the shared lock if necessary */
3015 int sharedLockByte
= SHARED_FIRST
+pInode
->sharedByte
;
3016 rc
= afpSetLock(context
->dbPath
, pFile
, sharedLockByte
, 1, 1);
3021 if( rc
==SQLITE_OK
&& pFile
->eFileLock
>=PENDING_LOCK
){
3022 rc
= afpSetLock(context
->dbPath
, pFile
, PENDING_BYTE
, 1, 0);
3024 if( rc
==SQLITE_OK
&& pFile
->eFileLock
>=RESERVED_LOCK
&& context
->reserved
){
3025 rc
= afpSetLock(context
->dbPath
, pFile
, RESERVED_BYTE
, 1, 0);
3027 context
->reserved
= 0;
3030 if( rc
==SQLITE_OK
&& (eFileLock
==SHARED_LOCK
|| pInode
->nShared
>1)){
3031 pInode
->eFileLock
= SHARED_LOCK
;
3034 if( rc
==SQLITE_OK
&& eFileLock
==NO_LOCK
){
3036 /* Decrement the shared lock counter. Release the lock using an
3037 ** OS call only when all threads in this same process have released
3040 unsigned long long sharedLockByte
= SHARED_FIRST
+pInode
->sharedByte
;
3042 if( pInode
->nShared
==0 ){
3043 SimulateIOErrorBenign(1);
3044 SimulateIOError( h
=(-1) )
3045 SimulateIOErrorBenign(0);
3047 rc
= afpSetLock(context
->dbPath
, pFile
, sharedLockByte
, 1, 0);
3050 pInode
->eFileLock
= NO_LOCK
;
3051 pFile
->eFileLock
= NO_LOCK
;
3054 if( rc
==SQLITE_OK
){
3056 assert( pInode
->nLock
>=0 );
3057 if( pInode
->nLock
==0 ){
3058 closePendingFds(pFile
);
3064 if( rc
==SQLITE_OK
) pFile
->eFileLock
= eFileLock
;
3069 ** Close a file & cleanup AFP specific locking context
3071 static int afpClose(sqlite3_file
*id
) {
3073 unixFile
*pFile
= (unixFile
*)id
;
3075 afpUnlock(id
, NO_LOCK
);
3077 if( pFile
->pInode
&& pFile
->pInode
->nLock
){
3078 /* If there are outstanding locks, do not actually close the file just
3079 ** yet because that would clear those locks. Instead, add the file
3080 ** descriptor to pInode->aPending. It will be automatically closed when
3081 ** the last lock is cleared.
3083 setPendingFd(pFile
);
3085 releaseInodeInfo(pFile
);
3086 sqlite3_free(pFile
->lockingContext
);
3087 rc
= closeUnixFile(id
);
3092 #endif /* defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE */
3094 ** The code above is the AFP lock implementation. The code is specific
3095 ** to MacOSX and does not work on other unix platforms. No alternative
3096 ** is available. If you don't compile for a mac, then the "unix-afp"
3097 ** VFS is not available.
3099 ********************* End of the AFP lock implementation **********************
3100 ******************************************************************************/
3102 /******************************************************************************
3103 *************************** Begin NFS Locking ********************************/
3105 #if defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE
3107 ** Lower the locking level on file descriptor pFile to eFileLock. eFileLock
3108 ** must be either NO_LOCK or SHARED_LOCK.
3110 ** If the locking level of the file descriptor is already at or below
3111 ** the requested locking level, this routine is a no-op.
3113 static int nfsUnlock(sqlite3_file
*id
, int eFileLock
){
3114 return posixUnlock(id
, eFileLock
, 1);
3117 #endif /* defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE */
3119 ** The code above is the NFS lock implementation. The code is specific
3120 ** to MacOSX and does not work on other unix platforms. No alternative
3123 ********************* End of the NFS lock implementation **********************
3124 ******************************************************************************/
3126 /******************************************************************************
3127 **************** Non-locking sqlite3_file methods *****************************
3129 ** The next division contains implementations for all methods of the
3130 ** sqlite3_file object other than the locking methods. The locking
3131 ** methods were defined in divisions above (one locking method per
3132 ** division). Those methods that are common to all locking modes
3133 ** are gather together into this division.
3137 ** Seek to the offset passed as the second argument, then read cnt
3138 ** bytes into pBuf. Return the number of bytes actually read.
3140 ** NB: If you define USE_PREAD or USE_PREAD64, then it might also
3141 ** be necessary to define _XOPEN_SOURCE to be 500. This varies from
3142 ** one system to another. Since SQLite does not define USE_PREAD
3143 ** in any form by default, we will not attempt to define _XOPEN_SOURCE.
3144 ** See tickets #2741 and #2681.
3146 ** To avoid stomping the errno value on a failed read the lastErrno value
3147 ** is set before returning.
3149 static int seekAndRead(unixFile
*id
, sqlite3_int64 offset
, void *pBuf
, int cnt
){
3152 #if (!defined(USE_PREAD) && !defined(USE_PREAD64))
3156 assert( cnt
==(cnt
&0x1ffff) );
3159 #if defined(USE_PREAD)
3160 got
= osPread(id
->h
, pBuf
, cnt
, offset
);
3161 SimulateIOError( got
= -1 );
3162 #elif defined(USE_PREAD64)
3163 got
= osPread64(id
->h
, pBuf
, cnt
, offset
);
3164 SimulateIOError( got
= -1 );
3166 newOffset
= lseek(id
->h
, offset
, SEEK_SET
);
3167 SimulateIOError( newOffset
= -1 );
3169 storeLastErrno((unixFile
*)id
, errno
);
3172 got
= osRead(id
->h
, pBuf
, cnt
);
3174 if( got
==cnt
) break;
3176 if( errno
==EINTR
){ got
= 1; continue; }
3178 storeLastErrno((unixFile
*)id
, errno
);
3184 pBuf
= (void*)(got
+ (char*)pBuf
);
3188 OSTRACE(("READ %-3d %5d %7lld %llu\n",
3189 id
->h
, got
+prior
, offset
-prior
, TIMER_ELAPSED
));
3194 ** Read data from a file into a buffer. Return SQLITE_OK if all
3195 ** bytes were read successfully and SQLITE_IOERR if anything goes
3198 static int unixRead(
3202 sqlite3_int64 offset
3204 unixFile
*pFile
= (unixFile
*)id
;
3207 assert( offset
>=0 );
3210 /* If this is a database file (not a journal, master-journal or temp
3211 ** file), the bytes in the locking range should never be read or written. */
3213 assert( pFile
->pPreallocatedUnused
==0
3214 || offset
>=PENDING_BYTE
+512
3215 || offset
+amt
<=PENDING_BYTE
3219 #if SQLITE_MAX_MMAP_SIZE>0
3220 /* Deal with as much of this read request as possible by transfering
3221 ** data from the memory mapping using memcpy(). */
3222 if( offset
<pFile
->mmapSize
){
3223 if( offset
+amt
<= pFile
->mmapSize
){
3224 memcpy(pBuf
, &((u8
*)(pFile
->pMapRegion
))[offset
], amt
);
3227 int nCopy
= pFile
->mmapSize
- offset
;
3228 memcpy(pBuf
, &((u8
*)(pFile
->pMapRegion
))[offset
], nCopy
);
3229 pBuf
= &((u8
*)pBuf
)[nCopy
];
3236 got
= seekAndRead(pFile
, offset
, pBuf
, amt
);
3240 /* lastErrno set by seekAndRead */
3241 return SQLITE_IOERR_READ
;
3243 storeLastErrno(pFile
, 0); /* not a system error */
3244 /* Unread parts of the buffer must be zero-filled */
3245 memset(&((char*)pBuf
)[got
], 0, amt
-got
);
3246 return SQLITE_IOERR_SHORT_READ
;
3251 ** Attempt to seek the file-descriptor passed as the first argument to
3252 ** absolute offset iOff, then attempt to write nBuf bytes of data from
3253 ** pBuf to it. If an error occurs, return -1 and set *piErrno. Otherwise,
3254 ** return the actual number of bytes written (which may be less than
3257 static int seekAndWriteFd(
3258 int fd
, /* File descriptor to write to */
3259 i64 iOff
, /* File offset to begin writing at */
3260 const void *pBuf
, /* Copy data from this buffer to the file */
3261 int nBuf
, /* Size of buffer pBuf in bytes */
3262 int *piErrno
/* OUT: Error number if error occurs */
3264 int rc
= 0; /* Value returned by system call */
3266 assert( nBuf
==(nBuf
&0x1ffff) );
3268 assert( piErrno
!=0 );
3272 #if defined(USE_PREAD)
3273 do{ rc
= (int)osPwrite(fd
, pBuf
, nBuf
, iOff
); }while( rc
<0 && errno
==EINTR
);
3274 #elif defined(USE_PREAD64)
3275 do{ rc
= (int)osPwrite64(fd
, pBuf
, nBuf
, iOff
);}while( rc
<0 && errno
==EINTR
);
3278 i64 iSeek
= lseek(fd
, iOff
, SEEK_SET
);
3279 SimulateIOError( iSeek
= -1 );
3284 rc
= osWrite(fd
, pBuf
, nBuf
);
3285 }while( rc
<0 && errno
==EINTR
);
3289 OSTRACE(("WRITE %-3d %5d %7lld %llu\n", fd
, rc
, iOff
, TIMER_ELAPSED
));
3291 if( rc
<0 ) *piErrno
= errno
;
3297 ** Seek to the offset in id->offset then read cnt bytes into pBuf.
3298 ** Return the number of bytes actually read. Update the offset.
3300 ** To avoid stomping the errno value on a failed write the lastErrno value
3301 ** is set before returning.
3303 static int seekAndWrite(unixFile
*id
, i64 offset
, const void *pBuf
, int cnt
){
3304 return seekAndWriteFd(id
->h
, offset
, pBuf
, cnt
, &id
->lastErrno
);
3309 ** Write data from a buffer into a file. Return SQLITE_OK on success
3310 ** or some other error code on failure.
3312 static int unixWrite(
3316 sqlite3_int64 offset
3318 unixFile
*pFile
= (unixFile
*)id
;
3323 /* If this is a database file (not a journal, master-journal or temp
3324 ** file), the bytes in the locking range should never be read or written. */
3326 assert( pFile
->pPreallocatedUnused
==0
3327 || offset
>=PENDING_BYTE
+512
3328 || offset
+amt
<=PENDING_BYTE
3333 /* If we are doing a normal write to a database file (as opposed to
3334 ** doing a hot-journal rollback or a write to some file other than a
3335 ** normal database file) then record the fact that the database
3336 ** has changed. If the transaction counter is modified, record that
3339 if( pFile
->inNormalWrite
){
3340 pFile
->dbUpdate
= 1; /* The database has been modified */
3341 if( offset
<=24 && offset
+amt
>=27 ){
3344 SimulateIOErrorBenign(1);
3345 rc
= seekAndRead(pFile
, 24, oldCntr
, 4);
3346 SimulateIOErrorBenign(0);
3347 if( rc
!=4 || memcmp(oldCntr
, &((char*)pBuf
)[24-offset
], 4)!=0 ){
3348 pFile
->transCntrChng
= 1; /* The transaction counter has changed */
3354 #if defined(SQLITE_MMAP_READWRITE) && SQLITE_MAX_MMAP_SIZE>0
3355 /* Deal with as much of this write request as possible by transfering
3356 ** data from the memory mapping using memcpy(). */
3357 if( offset
<pFile
->mmapSize
){
3358 if( offset
+amt
<= pFile
->mmapSize
){
3359 memcpy(&((u8
*)(pFile
->pMapRegion
))[offset
], pBuf
, amt
);
3362 int nCopy
= pFile
->mmapSize
- offset
;
3363 memcpy(&((u8
*)(pFile
->pMapRegion
))[offset
], pBuf
, nCopy
);
3364 pBuf
= &((u8
*)pBuf
)[nCopy
];
3371 while( (wrote
= seekAndWrite(pFile
, offset
, pBuf
, amt
))<amt
&& wrote
>0 ){
3374 pBuf
= &((char*)pBuf
)[wrote
];
3376 SimulateIOError(( wrote
=(-1), amt
=1 ));
3377 SimulateDiskfullError(( wrote
=0, amt
=1 ));
3380 if( wrote
<0 && pFile
->lastErrno
!=ENOSPC
){
3381 /* lastErrno set by seekAndWrite */
3382 return SQLITE_IOERR_WRITE
;
3384 storeLastErrno(pFile
, 0); /* not a system error */
3394 ** Count the number of fullsyncs and normal syncs. This is used to test
3395 ** that syncs and fullsyncs are occurring at the right times.
3397 int sqlite3_sync_count
= 0;
3398 int sqlite3_fullsync_count
= 0;
3402 ** We do not trust systems to provide a working fdatasync(). Some do.
3403 ** Others do no. To be safe, we will stick with the (slightly slower)
3404 ** fsync(). If you know that your system does support fdatasync() correctly,
3405 ** then simply compile with -Dfdatasync=fdatasync or -DHAVE_FDATASYNC
3407 #if !defined(fdatasync) && !HAVE_FDATASYNC
3408 # define fdatasync fsync
3412 ** Define HAVE_FULLFSYNC to 0 or 1 depending on whether or not
3413 ** the F_FULLFSYNC macro is defined. F_FULLFSYNC is currently
3414 ** only available on Mac OS X. But that could change.
3417 # define HAVE_FULLFSYNC 1
3419 # define HAVE_FULLFSYNC 0
3424 ** The fsync() system call does not work as advertised on many
3425 ** unix systems. The following procedure is an attempt to make
3428 ** The SQLITE_NO_SYNC macro disables all fsync()s. This is useful
3429 ** for testing when we want to run through the test suite quickly.
3430 ** You are strongly advised *not* to deploy with SQLITE_NO_SYNC
3431 ** enabled, however, since with SQLITE_NO_SYNC enabled, an OS crash
3432 ** or power failure will likely corrupt the database file.
3434 ** SQLite sets the dataOnly flag if the size of the file is unchanged.
3435 ** The idea behind dataOnly is that it should only write the file content
3436 ** to disk, not the inode. We only set dataOnly if the file size is
3437 ** unchanged since the file size is part of the inode. However,
3438 ** Ted Ts'o tells us that fdatasync() will also write the inode if the
3439 ** file size has changed. The only real difference between fdatasync()
3440 ** and fsync(), Ted tells us, is that fdatasync() will not flush the
3441 ** inode if the mtime or owner or other inode attributes have changed.
3442 ** We only care about the file size, not the other file attributes, so
3443 ** as far as SQLite is concerned, an fdatasync() is always adequate.
3444 ** So, we always use fdatasync() if it is available, regardless of
3445 ** the value of the dataOnly flag.
3447 static int full_fsync(int fd
, int fullSync
, int dataOnly
){
3450 /* The following "ifdef/elif/else/" block has the same structure as
3451 ** the one below. It is replicated here solely to avoid cluttering
3452 ** up the real code with the UNUSED_PARAMETER() macros.
3454 #ifdef SQLITE_NO_SYNC
3455 UNUSED_PARAMETER(fd
);
3456 UNUSED_PARAMETER(fullSync
);
3457 UNUSED_PARAMETER(dataOnly
);
3458 #elif HAVE_FULLFSYNC
3459 UNUSED_PARAMETER(dataOnly
);
3461 UNUSED_PARAMETER(fullSync
);
3462 UNUSED_PARAMETER(dataOnly
);
3465 /* Record the number of times that we do a normal fsync() and
3466 ** FULLSYNC. This is used during testing to verify that this procedure
3467 ** gets called with the correct arguments.
3470 if( fullSync
) sqlite3_fullsync_count
++;
3471 sqlite3_sync_count
++;
3474 /* If we compiled with the SQLITE_NO_SYNC flag, then syncing is a
3475 ** no-op. But go ahead and call fstat() to validate the file
3476 ** descriptor as we need a method to provoke a failure during
3477 ** coverate testing.
3479 #ifdef SQLITE_NO_SYNC
3482 rc
= osFstat(fd
, &buf
);
3484 #elif HAVE_FULLFSYNC
3486 rc
= osFcntl(fd
, F_FULLFSYNC
, 0);
3490 /* If the FULLFSYNC failed, fall back to attempting an fsync().
3491 ** It shouldn't be possible for fullfsync to fail on the local
3492 ** file system (on OSX), so failure indicates that FULLFSYNC
3493 ** isn't supported for this file system. So, attempt an fsync
3494 ** and (for now) ignore the overhead of a superfluous fcntl call.
3495 ** It'd be better to detect fullfsync support once and avoid
3496 ** the fcntl call every time sync is called.
3498 if( rc
) rc
= fsync(fd
);
3500 #elif defined(__APPLE__)
3501 /* fdatasync() on HFS+ doesn't yet flush the file size if it changed correctly
3502 ** so currently we default to the macro that redefines fdatasync to fsync
3508 if( rc
==-1 && errno
==ENOTSUP
){
3511 #endif /* OS_VXWORKS */
3512 #endif /* ifdef SQLITE_NO_SYNC elif HAVE_FULLFSYNC */
3514 if( OS_VXWORKS
&& rc
!= -1 ){
3521 ** Open a file descriptor to the directory containing file zFilename.
3522 ** If successful, *pFd is set to the opened file descriptor and
3523 ** SQLITE_OK is returned. If an error occurs, either SQLITE_NOMEM
3524 ** or SQLITE_CANTOPEN is returned and *pFd is set to an undefined
3527 ** The directory file descriptor is used for only one thing - to
3528 ** fsync() a directory to make sure file creation and deletion events
3529 ** are flushed to disk. Such fsyncs are not needed on newer
3530 ** journaling filesystems, but are required on older filesystems.
3532 ** This routine can be overridden using the xSetSysCall interface.
3533 ** The ability to override this routine was added in support of the
3534 ** chromium sandbox. Opening a directory is a security risk (we are
3535 ** told) so making it overrideable allows the chromium sandbox to
3536 ** replace this routine with a harmless no-op. To make this routine
3537 ** a no-op, replace it with a stub that returns SQLITE_OK but leaves
3538 ** *pFd set to a negative number.
3540 ** If SQLITE_OK is returned, the caller is responsible for closing
3541 ** the file descriptor *pFd using close().
3543 static int openDirectory(const char *zFilename
, int *pFd
){
3546 char zDirname
[MAX_PATHNAME
+1];
3548 sqlite3_snprintf(MAX_PATHNAME
, zDirname
, "%s", zFilename
);
3549 for(ii
=(int)strlen(zDirname
); ii
>0 && zDirname
[ii
]!='/'; ii
--);
3551 zDirname
[ii
] = '\0';
3553 if( zDirname
[0]!='/' ) zDirname
[0] = '.';
3556 fd
= robust_open(zDirname
, O_RDONLY
|O_BINARY
, 0);
3558 OSTRACE(("OPENDIR %-3d %s\n", fd
, zDirname
));
3561 if( fd
>=0 ) return SQLITE_OK
;
3562 return unixLogError(SQLITE_CANTOPEN_BKPT
, "openDirectory", zDirname
);
3566 ** Make sure all writes to a particular file are committed to disk.
3568 ** If dataOnly==0 then both the file itself and its metadata (file
3569 ** size, access time, etc) are synced. If dataOnly!=0 then only the
3570 ** file data is synced.
3572 ** Under Unix, also make sure that the directory entry for the file
3573 ** has been created by fsync-ing the directory that contains the file.
3574 ** If we do not do this and we encounter a power failure, the directory
3575 ** entry for the journal might not exist after we reboot. The next
3576 ** SQLite to access the file will not know that the journal exists (because
3577 ** the directory entry for the journal was never created) and the transaction
3578 ** will not roll back - possibly leading to database corruption.
3580 static int unixSync(sqlite3_file
*id
, int flags
){
3582 unixFile
*pFile
= (unixFile
*)id
;
3584 int isDataOnly
= (flags
&SQLITE_SYNC_DATAONLY
);
3585 int isFullsync
= (flags
&0x0F)==SQLITE_SYNC_FULL
;
3587 /* Check that one of SQLITE_SYNC_NORMAL or FULL was passed */
3588 assert((flags
&0x0F)==SQLITE_SYNC_NORMAL
3589 || (flags
&0x0F)==SQLITE_SYNC_FULL
3592 /* Unix cannot, but some systems may return SQLITE_FULL from here. This
3593 ** line is to test that doing so does not cause any problems.
3595 SimulateDiskfullError( return SQLITE_FULL
);
3598 OSTRACE(("SYNC %-3d\n", pFile
->h
));
3599 rc
= full_fsync(pFile
->h
, isFullsync
, isDataOnly
);
3600 SimulateIOError( rc
=1 );
3602 storeLastErrno(pFile
, errno
);
3603 return unixLogError(SQLITE_IOERR_FSYNC
, "full_fsync", pFile
->zPath
);
3606 /* Also fsync the directory containing the file if the DIRSYNC flag
3607 ** is set. This is a one-time occurrence. Many systems (examples: AIX)
3608 ** are unable to fsync a directory, so ignore errors on the fsync.
3610 if( pFile
->ctrlFlags
& UNIXFILE_DIRSYNC
){
3612 OSTRACE(("DIRSYNC %s (have_fullfsync=%d fullsync=%d)\n", pFile
->zPath
,
3613 HAVE_FULLFSYNC
, isFullsync
));
3614 rc
= osOpenDirectory(pFile
->zPath
, &dirfd
);
3615 if( rc
==SQLITE_OK
){
3616 full_fsync(dirfd
, 0, 0);
3617 robust_close(pFile
, dirfd
, __LINE__
);
3619 assert( rc
==SQLITE_CANTOPEN
);
3622 pFile
->ctrlFlags
&= ~UNIXFILE_DIRSYNC
;
3628 ** Truncate an open file to a specified size
3630 static int unixTruncate(sqlite3_file
*id
, i64 nByte
){
3631 unixFile
*pFile
= (unixFile
*)id
;
3634 SimulateIOError( return SQLITE_IOERR_TRUNCATE
);
3636 /* If the user has configured a chunk-size for this file, truncate the
3637 ** file so that it consists of an integer number of chunks (i.e. the
3638 ** actual file size after the operation may be larger than the requested
3641 if( pFile
->szChunk
>0 ){
3642 nByte
= ((nByte
+ pFile
->szChunk
- 1)/pFile
->szChunk
) * pFile
->szChunk
;
3645 rc
= robust_ftruncate(pFile
->h
, nByte
);
3647 storeLastErrno(pFile
, errno
);
3648 return unixLogError(SQLITE_IOERR_TRUNCATE
, "ftruncate", pFile
->zPath
);
3651 /* If we are doing a normal write to a database file (as opposed to
3652 ** doing a hot-journal rollback or a write to some file other than a
3653 ** normal database file) and we truncate the file to zero length,
3654 ** that effectively updates the change counter. This might happen
3655 ** when restoring a database using the backup API from a zero-length
3658 if( pFile
->inNormalWrite
&& nByte
==0 ){
3659 pFile
->transCntrChng
= 1;
3663 #if SQLITE_MAX_MMAP_SIZE>0
3664 /* If the file was just truncated to a size smaller than the currently
3665 ** mapped region, reduce the effective mapping size as well. SQLite will
3666 ** use read() and write() to access data beyond this point from now on.
3668 if( nByte
<pFile
->mmapSize
){
3669 pFile
->mmapSize
= nByte
;
3678 ** Determine the current size of a file in bytes
3680 static int unixFileSize(sqlite3_file
*id
, i64
*pSize
){
3684 rc
= osFstat(((unixFile
*)id
)->h
, &buf
);
3685 SimulateIOError( rc
=1 );
3687 storeLastErrno((unixFile
*)id
, errno
);
3688 return SQLITE_IOERR_FSTAT
;
3690 *pSize
= buf
.st_size
;
3692 /* When opening a zero-size database, the findInodeInfo() procedure
3693 ** writes a single byte into that file in order to work around a bug
3694 ** in the OS-X msdos filesystem. In order to avoid problems with upper
3695 ** layers, we need to report this file size as zero even though it is
3696 ** really 1. Ticket #3260.
3698 if( *pSize
==1 ) *pSize
= 0;
3704 #if SQLITE_ENABLE_LOCKING_STYLE && defined(__APPLE__)
3706 ** Handler for proxy-locking file-control verbs. Defined below in the
3707 ** proxying locking division.
3709 static int proxyFileControl(sqlite3_file
*,int,void*);
3713 ** This function is called to handle the SQLITE_FCNTL_SIZE_HINT
3714 ** file-control operation. Enlarge the database to nBytes in size
3715 ** (rounded up to the next chunk-size). If the database is already
3716 ** nBytes or larger, this routine is a no-op.
3718 static int fcntlSizeHint(unixFile
*pFile
, i64 nByte
){
3719 if( pFile
->szChunk
>0 ){
3720 i64 nSize
; /* Required file size */
3721 struct stat buf
; /* Used to hold return values of fstat() */
3723 if( osFstat(pFile
->h
, &buf
) ){
3724 return SQLITE_IOERR_FSTAT
;
3727 nSize
= ((nByte
+pFile
->szChunk
-1) / pFile
->szChunk
) * pFile
->szChunk
;
3728 if( nSize
>(i64
)buf
.st_size
){
3730 #if defined(HAVE_POSIX_FALLOCATE) && HAVE_POSIX_FALLOCATE
3731 /* The code below is handling the return value of osFallocate()
3732 ** correctly. posix_fallocate() is defined to "returns zero on success,
3733 ** or an error number on failure". See the manpage for details. */
3736 err
= osFallocate(pFile
->h
, buf
.st_size
, nSize
-buf
.st_size
);
3737 }while( err
==EINTR
);
3738 if( err
) return SQLITE_IOERR_WRITE
;
3740 /* If the OS does not have posix_fallocate(), fake it. Write a
3741 ** single byte to the last byte in each block that falls entirely
3742 ** within the extended region. Then, if required, a single byte
3743 ** at offset (nSize-1), to set the size of the file correctly.
3744 ** This is a similar technique to that used by glibc on systems
3745 ** that do not have a real fallocate() call.
3747 int nBlk
= buf
.st_blksize
; /* File-system block size */
3748 int nWrite
= 0; /* Number of bytes written by seekAndWrite */
3749 i64 iWrite
; /* Next offset to write to */
3751 iWrite
= (buf
.st_size
/nBlk
)*nBlk
+ nBlk
- 1;
3752 assert( iWrite
>=buf
.st_size
);
3753 assert( ((iWrite
+1)%nBlk
)==0 );
3754 for(/*no-op*/; iWrite
<nSize
+nBlk
-1; iWrite
+=nBlk
){
3755 if( iWrite
>=nSize
) iWrite
= nSize
- 1;
3756 nWrite
= seekAndWrite(pFile
, iWrite
, "", 1);
3757 if( nWrite
!=1 ) return SQLITE_IOERR_WRITE
;
3763 #if SQLITE_MAX_MMAP_SIZE>0
3764 if( pFile
->mmapSizeMax
>0 && nByte
>pFile
->mmapSize
){
3766 if( pFile
->szChunk
<=0 ){
3767 if( robust_ftruncate(pFile
->h
, nByte
) ){
3768 storeLastErrno(pFile
, errno
);
3769 return unixLogError(SQLITE_IOERR_TRUNCATE
, "ftruncate", pFile
->zPath
);
3773 rc
= unixMapfile(pFile
, nByte
);
3782 ** If *pArg is initially negative then this is a query. Set *pArg to
3783 ** 1 or 0 depending on whether or not bit mask of pFile->ctrlFlags is set.
3785 ** If *pArg is 0 or 1, then clear or set the mask bit of pFile->ctrlFlags.
3787 static void unixModeBit(unixFile
*pFile
, unsigned char mask
, int *pArg
){
3789 *pArg
= (pFile
->ctrlFlags
& mask
)!=0;
3790 }else if( (*pArg
)==0 ){
3791 pFile
->ctrlFlags
&= ~mask
;
3793 pFile
->ctrlFlags
|= mask
;
3797 /* Forward declaration */
3798 static int unixGetTempname(int nBuf
, char *zBuf
);
3801 ** Information and control of an open file handle.
3803 static int unixFileControl(sqlite3_file
*id
, int op
, void *pArg
){
3804 unixFile
*pFile
= (unixFile
*)id
;
3806 #if defined(__linux__) && defined(SQLITE_ENABLE_BATCH_ATOMIC_WRITE)
3807 case SQLITE_FCNTL_BEGIN_ATOMIC_WRITE
: {
3808 int rc
= osIoctl(pFile
->h
, F2FS_IOC_START_ATOMIC_WRITE
);
3809 return rc
? SQLITE_IOERR_BEGIN_ATOMIC
: SQLITE_OK
;
3811 case SQLITE_FCNTL_COMMIT_ATOMIC_WRITE
: {
3812 int rc
= osIoctl(pFile
->h
, F2FS_IOC_COMMIT_ATOMIC_WRITE
);
3813 return rc
? SQLITE_IOERR_COMMIT_ATOMIC
: SQLITE_OK
;
3815 case SQLITE_FCNTL_ROLLBACK_ATOMIC_WRITE
: {
3816 int rc
= osIoctl(pFile
->h
, F2FS_IOC_ABORT_VOLATILE_WRITE
);
3817 return rc
? SQLITE_IOERR_ROLLBACK_ATOMIC
: SQLITE_OK
;
3819 #endif /* __linux__ && SQLITE_ENABLE_BATCH_ATOMIC_WRITE */
3821 case SQLITE_FCNTL_LOCKSTATE
: {
3822 *(int*)pArg
= pFile
->eFileLock
;
3825 case SQLITE_FCNTL_LAST_ERRNO
: {
3826 *(int*)pArg
= pFile
->lastErrno
;
3829 case SQLITE_FCNTL_CHUNK_SIZE
: {
3830 pFile
->szChunk
= *(int *)pArg
;
3833 case SQLITE_FCNTL_SIZE_HINT
: {
3835 SimulateIOErrorBenign(1);
3836 rc
= fcntlSizeHint(pFile
, *(i64
*)pArg
);
3837 SimulateIOErrorBenign(0);
3840 case SQLITE_FCNTL_PERSIST_WAL
: {
3841 unixModeBit(pFile
, UNIXFILE_PERSIST_WAL
, (int*)pArg
);
3844 case SQLITE_FCNTL_POWERSAFE_OVERWRITE
: {
3845 unixModeBit(pFile
, UNIXFILE_PSOW
, (int*)pArg
);
3848 case SQLITE_FCNTL_VFSNAME
: {
3849 *(char**)pArg
= sqlite3_mprintf("%s", pFile
->pVfs
->zName
);
3852 case SQLITE_FCNTL_TEMPFILENAME
: {
3853 char *zTFile
= sqlite3_malloc64( pFile
->pVfs
->mxPathname
);
3855 unixGetTempname(pFile
->pVfs
->mxPathname
, zTFile
);
3856 *(char**)pArg
= zTFile
;
3860 case SQLITE_FCNTL_HAS_MOVED
: {
3861 *(int*)pArg
= fileHasMoved(pFile
);
3864 #if SQLITE_MAX_MMAP_SIZE>0
3865 case SQLITE_FCNTL_MMAP_SIZE
: {
3866 i64 newLimit
= *(i64
*)pArg
;
3868 if( newLimit
>sqlite3GlobalConfig
.mxMmap
){
3869 newLimit
= sqlite3GlobalConfig
.mxMmap
;
3872 /* The value of newLimit may be eventually cast to (size_t) and passed
3873 ** to mmap(). Restrict its value to 2GB if (size_t) is not at least a
3875 if( newLimit
>0 && sizeof(size_t)<8 ){
3876 newLimit
= (newLimit
& 0x7FFFFFFF);
3879 *(i64
*)pArg
= pFile
->mmapSizeMax
;
3880 if( newLimit
>=0 && newLimit
!=pFile
->mmapSizeMax
&& pFile
->nFetchOut
==0 ){
3881 pFile
->mmapSizeMax
= newLimit
;
3882 if( pFile
->mmapSize
>0 ){
3883 unixUnmapfile(pFile
);
3884 rc
= unixMapfile(pFile
, -1);
3891 /* The pager calls this method to signal that it has done
3892 ** a rollback and that the database is therefore unchanged and
3893 ** it hence it is OK for the transaction change counter to be
3896 case SQLITE_FCNTL_DB_UNCHANGED
: {
3897 ((unixFile
*)id
)->dbUpdate
= 0;
3901 #if SQLITE_ENABLE_LOCKING_STYLE && defined(__APPLE__)
3902 case SQLITE_FCNTL_SET_LOCKPROXYFILE
:
3903 case SQLITE_FCNTL_GET_LOCKPROXYFILE
: {
3904 return proxyFileControl(id
,op
,pArg
);
3906 #endif /* SQLITE_ENABLE_LOCKING_STYLE && defined(__APPLE__) */
3908 return SQLITE_NOTFOUND
;
3912 ** If pFd->sectorSize is non-zero when this function is called, it is a
3913 ** no-op. Otherwise, the values of pFd->sectorSize and
3914 ** pFd->deviceCharacteristics are set according to the file-system
3917 ** There are two versions of this function. One for QNX and one for all
3921 static void setDeviceCharacteristics(unixFile
*pFd
){
3922 assert( pFd
->deviceCharacteristics
==0 || pFd
->sectorSize
!=0 );
3923 if( pFd
->sectorSize
==0 ){
3924 #if defined(__linux__) && defined(SQLITE_ENABLE_BATCH_ATOMIC_WRITE)
3928 /* Check for support for F2FS atomic batch writes. */
3929 res
= osIoctl(pFd
->h
, F2FS_IOC_GET_FEATURES
, &f
);
3930 if( res
==0 && (f
& F2FS_FEATURE_ATOMIC_WRITE
) ){
3931 pFd
->deviceCharacteristics
= SQLITE_IOCAP_BATCH_ATOMIC
;
3933 #endif /* __linux__ && SQLITE_ENABLE_BATCH_ATOMIC_WRITE */
3935 /* Set the POWERSAFE_OVERWRITE flag if requested. */
3936 if( pFd
->ctrlFlags
& UNIXFILE_PSOW
){
3937 pFd
->deviceCharacteristics
|= SQLITE_IOCAP_POWERSAFE_OVERWRITE
;
3940 pFd
->sectorSize
= SQLITE_DEFAULT_SECTOR_SIZE
;
3944 #include <sys/dcmd_blk.h>
3945 #include <sys/statvfs.h>
3946 static void setDeviceCharacteristics(unixFile
*pFile
){
3947 if( pFile
->sectorSize
== 0 ){
3948 struct statvfs fsInfo
;
3950 /* Set defaults for non-supported filesystems */
3951 pFile
->sectorSize
= SQLITE_DEFAULT_SECTOR_SIZE
;
3952 pFile
->deviceCharacteristics
= 0;
3953 if( fstatvfs(pFile
->h
, &fsInfo
) == -1 ) {
3957 if( !strcmp(fsInfo
.f_basetype
, "tmp") ) {
3958 pFile
->sectorSize
= fsInfo
.f_bsize
;
3959 pFile
->deviceCharacteristics
=
3960 SQLITE_IOCAP_ATOMIC4K
| /* All ram filesystem writes are atomic */
3961 SQLITE_IOCAP_SAFE_APPEND
| /* growing the file does not occur until
3962 ** the write succeeds */
3963 SQLITE_IOCAP_SEQUENTIAL
| /* The ram filesystem has no write behind
3964 ** so it is ordered */
3966 }else if( strstr(fsInfo
.f_basetype
, "etfs") ){
3967 pFile
->sectorSize
= fsInfo
.f_bsize
;
3968 pFile
->deviceCharacteristics
=
3969 /* etfs cluster size writes are atomic */
3970 (pFile
->sectorSize
/ 512 * SQLITE_IOCAP_ATOMIC512
) |
3971 SQLITE_IOCAP_SAFE_APPEND
| /* growing the file does not occur until
3972 ** the write succeeds */
3973 SQLITE_IOCAP_SEQUENTIAL
| /* The ram filesystem has no write behind
3974 ** so it is ordered */
3976 }else if( !strcmp(fsInfo
.f_basetype
, "qnx6") ){
3977 pFile
->sectorSize
= fsInfo
.f_bsize
;
3978 pFile
->deviceCharacteristics
=
3979 SQLITE_IOCAP_ATOMIC
| /* All filesystem writes are atomic */
3980 SQLITE_IOCAP_SAFE_APPEND
| /* growing the file does not occur until
3981 ** the write succeeds */
3982 SQLITE_IOCAP_SEQUENTIAL
| /* The ram filesystem has no write behind
3983 ** so it is ordered */
3985 }else if( !strcmp(fsInfo
.f_basetype
, "qnx4") ){
3986 pFile
->sectorSize
= fsInfo
.f_bsize
;
3987 pFile
->deviceCharacteristics
=
3988 /* full bitset of atomics from max sector size and smaller */
3989 ((pFile
->sectorSize
/ 512 * SQLITE_IOCAP_ATOMIC512
) << 1) - 2 |
3990 SQLITE_IOCAP_SEQUENTIAL
| /* The ram filesystem has no write behind
3991 ** so it is ordered */
3993 }else if( strstr(fsInfo
.f_basetype
, "dos") ){
3994 pFile
->sectorSize
= fsInfo
.f_bsize
;
3995 pFile
->deviceCharacteristics
=
3996 /* full bitset of atomics from max sector size and smaller */
3997 ((pFile
->sectorSize
/ 512 * SQLITE_IOCAP_ATOMIC512
) << 1) - 2 |
3998 SQLITE_IOCAP_SEQUENTIAL
| /* The ram filesystem has no write behind
3999 ** so it is ordered */
4002 pFile
->deviceCharacteristics
=
4003 SQLITE_IOCAP_ATOMIC512
| /* blocks are atomic */
4004 SQLITE_IOCAP_SAFE_APPEND
| /* growing the file does not occur until
4005 ** the write succeeds */
4009 /* Last chance verification. If the sector size isn't a multiple of 512
4010 ** then it isn't valid.*/
4011 if( pFile
->sectorSize
% 512 != 0 ){
4012 pFile
->deviceCharacteristics
= 0;
4013 pFile
->sectorSize
= SQLITE_DEFAULT_SECTOR_SIZE
;
4019 ** Return the sector size in bytes of the underlying block device for
4020 ** the specified file. This is almost always 512 bytes, but may be
4021 ** larger for some devices.
4023 ** SQLite code assumes this function cannot fail. It also assumes that
4024 ** if two files are created in the same file-system directory (i.e.
4025 ** a database and its journal file) that the sector size will be the
4028 static int unixSectorSize(sqlite3_file
*id
){
4029 unixFile
*pFd
= (unixFile
*)id
;
4030 setDeviceCharacteristics(pFd
);
4031 return pFd
->sectorSize
;
4035 ** Return the device characteristics for the file.
4037 ** This VFS is set up to return SQLITE_IOCAP_POWERSAFE_OVERWRITE by default.
4038 ** However, that choice is controversial since technically the underlying
4039 ** file system does not always provide powersafe overwrites. (In other
4040 ** words, after a power-loss event, parts of the file that were never
4041 ** written might end up being altered.) However, non-PSOW behavior is very,
4042 ** very rare. And asserting PSOW makes a large reduction in the amount
4043 ** of required I/O for journaling, since a lot of padding is eliminated.
4044 ** Hence, while POWERSAFE_OVERWRITE is on by default, there is a file-control
4045 ** available to turn it off and URI query parameter available to turn it off.
4047 static int unixDeviceCharacteristics(sqlite3_file
*id
){
4048 unixFile
*pFd
= (unixFile
*)id
;
4049 setDeviceCharacteristics(pFd
);
4050 return pFd
->deviceCharacteristics
;
4053 #if !defined(SQLITE_OMIT_WAL) || SQLITE_MAX_MMAP_SIZE>0
4056 ** Return the system page size.
4058 ** This function should not be called directly by other code in this file.
4059 ** Instead, it should be called via macro osGetpagesize().
4061 static int unixGetpagesize(void){
4064 #elif defined(_BSD_SOURCE)
4065 return getpagesize();
4067 return (int)sysconf(_SC_PAGESIZE
);
4071 #endif /* !defined(SQLITE_OMIT_WAL) || SQLITE_MAX_MMAP_SIZE>0 */
4073 #ifndef SQLITE_OMIT_WAL
4076 ** Object used to represent an shared memory buffer.
4078 ** When multiple threads all reference the same wal-index, each thread
4079 ** has its own unixShm object, but they all point to a single instance
4080 ** of this unixShmNode object. In other words, each wal-index is opened
4081 ** only once per process.
4083 ** Each unixShmNode object is connected to a single unixInodeInfo object.
4084 ** We could coalesce this object into unixInodeInfo, but that would mean
4085 ** every open file that does not use shared memory (in other words, most
4086 ** open files) would have to carry around this extra information. So
4087 ** the unixInodeInfo object contains a pointer to this unixShmNode object
4088 ** and the unixShmNode object is created only when needed.
4090 ** unixMutexHeld() must be true when creating or destroying
4091 ** this object or while reading or writing the following fields:
4095 ** The following fields are read-only after the object is created:
4100 ** Either unixShmNode.mutex must be held or unixShmNode.nRef==0 and
4101 ** unixMutexHeld() is true when reading or writing any other field
4102 ** in this structure.
4104 struct unixShmNode
{
4105 unixInodeInfo
*pInode
; /* unixInodeInfo that owns this SHM node */
4106 sqlite3_mutex
*mutex
; /* Mutex to access this object */
4107 char *zFilename
; /* Name of the mmapped file */
4108 int h
; /* Open file descriptor */
4109 int szRegion
; /* Size of shared-memory regions */
4110 u16 nRegion
; /* Size of array apRegion */
4111 u8 isReadonly
; /* True if read-only */
4112 u8 isUnlocked
; /* True if no DMS lock held */
4113 char **apRegion
; /* Array of mapped shared-memory regions */
4114 int nRef
; /* Number of unixShm objects pointing to this */
4115 unixShm
*pFirst
; /* All unixShm objects pointing to this */
4117 u8 exclMask
; /* Mask of exclusive locks held */
4118 u8 sharedMask
; /* Mask of shared locks held */
4119 u8 nextShmId
; /* Next available unixShm.id value */
4124 ** Structure used internally by this VFS to record the state of an
4125 ** open shared memory connection.
4127 ** The following fields are initialized when this object is created and
4128 ** are read-only thereafter:
4133 ** All other fields are read/write. The unixShm.pFile->mutex must be held
4134 ** while accessing any read/write fields.
4137 unixShmNode
*pShmNode
; /* The underlying unixShmNode object */
4138 unixShm
*pNext
; /* Next unixShm with the same unixShmNode */
4139 u8 hasMutex
; /* True if holding the unixShmNode mutex */
4140 u8 id
; /* Id of this connection within its unixShmNode */
4141 u16 sharedMask
; /* Mask of shared locks held */
4142 u16 exclMask
; /* Mask of exclusive locks held */
4146 ** Constants used for locking
4148 #define UNIX_SHM_BASE ((22+SQLITE_SHM_NLOCK)*4) /* first lock byte */
4149 #define UNIX_SHM_DMS (UNIX_SHM_BASE+SQLITE_SHM_NLOCK) /* deadman switch */
4152 ** Apply posix advisory locks for all bytes from ofst through ofst+n-1.
4154 ** Locks block if the mask is exactly UNIX_SHM_C and are non-blocking
4157 static int unixShmSystemLock(
4158 unixFile
*pFile
, /* Open connection to the WAL file */
4159 int lockType
, /* F_UNLCK, F_RDLCK, or F_WRLCK */
4160 int ofst
, /* First byte of the locking range */
4161 int n
/* Number of bytes to lock */
4163 unixShmNode
*pShmNode
; /* Apply locks to this open shared-memory segment */
4164 struct flock f
; /* The posix advisory locking structure */
4165 int rc
= SQLITE_OK
; /* Result code form fcntl() */
4167 /* Access to the unixShmNode object is serialized by the caller */
4168 pShmNode
= pFile
->pInode
->pShmNode
;
4169 assert( pShmNode
->nRef
==0 || sqlite3_mutex_held(pShmNode
->mutex
) );
4171 /* Shared locks never span more than one byte */
4172 assert( n
==1 || lockType
!=F_RDLCK
);
4174 /* Locks are within range */
4175 assert( n
>=1 && n
<=SQLITE_SHM_NLOCK
);
4177 if( pShmNode
->h
>=0 ){
4178 /* Initialize the locking parameters */
4179 memset(&f
, 0, sizeof(f
));
4180 f
.l_type
= lockType
;
4181 f
.l_whence
= SEEK_SET
;
4185 rc
= osFcntl(pShmNode
->h
, F_SETLK
, &f
);
4186 rc
= (rc
!=(-1)) ? SQLITE_OK
: SQLITE_BUSY
;
4189 /* Update the global lock state and do debug tracing */
4192 OSTRACE(("SHM-LOCK "));
4193 mask
= ofst
>31 ? 0xffff : (1<<(ofst
+n
)) - (1<<ofst
);
4194 if( rc
==SQLITE_OK
){
4195 if( lockType
==F_UNLCK
){
4196 OSTRACE(("unlock %d ok", ofst
));
4197 pShmNode
->exclMask
&= ~mask
;
4198 pShmNode
->sharedMask
&= ~mask
;
4199 }else if( lockType
==F_RDLCK
){
4200 OSTRACE(("read-lock %d ok", ofst
));
4201 pShmNode
->exclMask
&= ~mask
;
4202 pShmNode
->sharedMask
|= mask
;
4204 assert( lockType
==F_WRLCK
);
4205 OSTRACE(("write-lock %d ok", ofst
));
4206 pShmNode
->exclMask
|= mask
;
4207 pShmNode
->sharedMask
&= ~mask
;
4210 if( lockType
==F_UNLCK
){
4211 OSTRACE(("unlock %d failed", ofst
));
4212 }else if( lockType
==F_RDLCK
){
4213 OSTRACE(("read-lock failed"));
4215 assert( lockType
==F_WRLCK
);
4216 OSTRACE(("write-lock %d failed", ofst
));
4219 OSTRACE((" - afterwards %03x,%03x\n",
4220 pShmNode
->sharedMask
, pShmNode
->exclMask
));
4228 ** Return the minimum number of 32KB shm regions that should be mapped at
4229 ** a time, assuming that each mapping must be an integer multiple of the
4230 ** current system page-size.
4232 ** Usually, this is 1. The exception seems to be systems that are configured
4233 ** to use 64KB pages - in this case each mapping must cover at least two
4236 static int unixShmRegionPerMap(void){
4237 int shmsz
= 32*1024; /* SHM region size */
4238 int pgsz
= osGetpagesize(); /* System page size */
4239 assert( ((pgsz
-1)&pgsz
)==0 ); /* Page size must be a power of 2 */
4240 if( pgsz
<shmsz
) return 1;
4245 ** Purge the unixShmNodeList list of all entries with unixShmNode.nRef==0.
4247 ** This is not a VFS shared-memory method; it is a utility function called
4248 ** by VFS shared-memory methods.
4250 static void unixShmPurge(unixFile
*pFd
){
4251 unixShmNode
*p
= pFd
->pInode
->pShmNode
;
4252 assert( unixMutexHeld() );
4253 if( p
&& ALWAYS(p
->nRef
==0) ){
4254 int nShmPerMap
= unixShmRegionPerMap();
4256 assert( p
->pInode
==pFd
->pInode
);
4257 sqlite3_mutex_free(p
->mutex
);
4258 for(i
=0; i
<p
->nRegion
; i
+=nShmPerMap
){
4260 osMunmap(p
->apRegion
[i
], p
->szRegion
);
4262 sqlite3_free(p
->apRegion
[i
]);
4265 sqlite3_free(p
->apRegion
);
4267 robust_close(pFd
, p
->h
, __LINE__
);
4270 p
->pInode
->pShmNode
= 0;
4276 ** The DMS lock has not yet been taken on shm file pShmNode. Attempt to
4277 ** take it now. Return SQLITE_OK if successful, or an SQLite error
4280 ** If the DMS cannot be locked because this is a readonly_shm=1
4281 ** connection and no other process already holds a lock, return
4282 ** SQLITE_READONLY_CANTINIT and set pShmNode->isUnlocked=1.
4284 static int unixLockSharedMemory(unixFile
*pDbFd
, unixShmNode
*pShmNode
){
4288 /* Use F_GETLK to determine the locks other processes are holding
4289 ** on the DMS byte. If it indicates that another process is holding
4290 ** a SHARED lock, then this process may also take a SHARED lock
4291 ** and proceed with opening the *-shm file.
4293 ** Or, if no other process is holding any lock, then this process
4294 ** is the first to open it. In this case take an EXCLUSIVE lock on the
4295 ** DMS byte and truncate the *-shm file to zero bytes in size. Then
4296 ** downgrade to a SHARED lock on the DMS byte.
4298 ** If another process is holding an EXCLUSIVE lock on the DMS byte,
4299 ** return SQLITE_BUSY to the caller (it will try again). An earlier
4300 ** version of this code attempted the SHARED lock at this point. But
4301 ** this introduced a subtle race condition: if the process holding
4302 ** EXCLUSIVE failed just before truncating the *-shm file, then this
4303 ** process might open and use the *-shm file without truncating it.
4304 ** And if the *-shm file has been corrupted by a power failure or
4305 ** system crash, the database itself may also become corrupt. */
4306 lock
.l_whence
= SEEK_SET
;
4307 lock
.l_start
= UNIX_SHM_DMS
;
4309 lock
.l_type
= F_WRLCK
;
4310 if( osFcntl(pShmNode
->h
, F_GETLK
, &lock
)!=0 ) {
4311 rc
= SQLITE_IOERR_LOCK
;
4312 }else if( lock
.l_type
==F_UNLCK
){
4313 if( pShmNode
->isReadonly
){
4314 pShmNode
->isUnlocked
= 1;
4315 rc
= SQLITE_READONLY_CANTINIT
;
4317 rc
= unixShmSystemLock(pDbFd
, F_WRLCK
, UNIX_SHM_DMS
, 1);
4318 if( rc
==SQLITE_OK
&& robust_ftruncate(pShmNode
->h
, 0) ){
4319 rc
= unixLogError(SQLITE_IOERR_SHMOPEN
,"ftruncate",pShmNode
->zFilename
);
4322 }else if( lock
.l_type
==F_WRLCK
){
4326 if( rc
==SQLITE_OK
){
4327 assert( lock
.l_type
==F_UNLCK
|| lock
.l_type
==F_RDLCK
);
4328 rc
= unixShmSystemLock(pDbFd
, F_RDLCK
, UNIX_SHM_DMS
, 1);
4334 ** Open a shared-memory area associated with open database file pDbFd.
4335 ** This particular implementation uses mmapped files.
4337 ** The file used to implement shared-memory is in the same directory
4338 ** as the open database file and has the same name as the open database
4339 ** file with the "-shm" suffix added. For example, if the database file
4340 ** is "/home/user1/config.db" then the file that is created and mmapped
4341 ** for shared memory will be called "/home/user1/config.db-shm".
4343 ** Another approach to is to use files in /dev/shm or /dev/tmp or an
4344 ** some other tmpfs mount. But if a file in a different directory
4345 ** from the database file is used, then differing access permissions
4346 ** or a chroot() might cause two different processes on the same
4347 ** database to end up using different files for shared memory -
4348 ** meaning that their memory would not really be shared - resulting
4349 ** in database corruption. Nevertheless, this tmpfs file usage
4350 ** can be enabled at compile-time using -DSQLITE_SHM_DIRECTORY="/dev/shm"
4351 ** or the equivalent. The use of the SQLITE_SHM_DIRECTORY compile-time
4352 ** option results in an incompatible build of SQLite; builds of SQLite
4353 ** that with differing SQLITE_SHM_DIRECTORY settings attempt to use the
4354 ** same database file at the same time, database corruption will likely
4355 ** result. The SQLITE_SHM_DIRECTORY compile-time option is considered
4356 ** "unsupported" and may go away in a future SQLite release.
4358 ** When opening a new shared-memory file, if no other instances of that
4359 ** file are currently open, in this process or in other processes, then
4360 ** the file must be truncated to zero length or have its header cleared.
4362 ** If the original database file (pDbFd) is using the "unix-excl" VFS
4363 ** that means that an exclusive lock is held on the database file and
4364 ** that no other processes are able to read or write the database. In
4365 ** that case, we do not really need shared memory. No shared memory
4366 ** file is created. The shared memory will be simulated with heap memory.
4368 static int unixOpenSharedMemory(unixFile
*pDbFd
){
4369 struct unixShm
*p
= 0; /* The connection to be opened */
4370 struct unixShmNode
*pShmNode
; /* The underlying mmapped file */
4371 int rc
= SQLITE_OK
; /* Result code */
4372 unixInodeInfo
*pInode
; /* The inode of fd */
4373 char *zShm
; /* Name of the file used for SHM */
4374 int nShmFilename
; /* Size of the SHM filename in bytes */
4376 /* Allocate space for the new unixShm object. */
4377 p
= sqlite3_malloc64( sizeof(*p
) );
4378 if( p
==0 ) return SQLITE_NOMEM_BKPT
;
4379 memset(p
, 0, sizeof(*p
));
4380 assert( pDbFd
->pShm
==0 );
4382 /* Check to see if a unixShmNode object already exists. Reuse an existing
4383 ** one if present. Create a new one if necessary.
4386 pInode
= pDbFd
->pInode
;
4387 pShmNode
= pInode
->pShmNode
;
4389 struct stat sStat
; /* fstat() info for database file */
4390 #ifndef SQLITE_SHM_DIRECTORY
4391 const char *zBasePath
= pDbFd
->zPath
;
4394 /* Call fstat() to figure out the permissions on the database file. If
4395 ** a new *-shm file is created, an attempt will be made to create it
4396 ** with the same permissions.
4398 if( osFstat(pDbFd
->h
, &sStat
) ){
4399 rc
= SQLITE_IOERR_FSTAT
;
4403 #ifdef SQLITE_SHM_DIRECTORY
4404 nShmFilename
= sizeof(SQLITE_SHM_DIRECTORY
) + 31;
4406 nShmFilename
= 6 + (int)strlen(zBasePath
);
4408 pShmNode
= sqlite3_malloc64( sizeof(*pShmNode
) + nShmFilename
);
4410 rc
= SQLITE_NOMEM_BKPT
;
4413 memset(pShmNode
, 0, sizeof(*pShmNode
)+nShmFilename
);
4414 zShm
= pShmNode
->zFilename
= (char*)&pShmNode
[1];
4415 #ifdef SQLITE_SHM_DIRECTORY
4416 sqlite3_snprintf(nShmFilename
, zShm
,
4417 SQLITE_SHM_DIRECTORY
"/sqlite-shm-%x-%x",
4418 (u32
)sStat
.st_ino
, (u32
)sStat
.st_dev
);
4420 sqlite3_snprintf(nShmFilename
, zShm
, "%s-shm", zBasePath
);
4421 sqlite3FileSuffix3(pDbFd
->zPath
, zShm
);
4424 pDbFd
->pInode
->pShmNode
= pShmNode
;
4425 pShmNode
->pInode
= pDbFd
->pInode
;
4426 if( sqlite3GlobalConfig
.bCoreMutex
){
4427 pShmNode
->mutex
= sqlite3_mutex_alloc(SQLITE_MUTEX_FAST
);
4428 if( pShmNode
->mutex
==0 ){
4429 rc
= SQLITE_NOMEM_BKPT
;
4434 if( pInode
->bProcessLock
==0 ){
4435 if( 0==sqlite3_uri_boolean(pDbFd
->zPath
, "readonly_shm", 0) ){
4436 pShmNode
->h
= robust_open(zShm
, O_RDWR
|O_CREAT
, (sStat
.st_mode
&0777));
4438 if( pShmNode
->h
<0 ){
4439 pShmNode
->h
= robust_open(zShm
, O_RDONLY
, (sStat
.st_mode
&0777));
4440 if( pShmNode
->h
<0 ){
4441 rc
= unixLogError(SQLITE_CANTOPEN_BKPT
, "open", zShm
);
4444 pShmNode
->isReadonly
= 1;
4447 /* If this process is running as root, make sure that the SHM file
4448 ** is owned by the same user that owns the original database. Otherwise,
4449 ** the original owner will not be able to connect.
4451 robustFchown(pShmNode
->h
, sStat
.st_uid
, sStat
.st_gid
);
4453 rc
= unixLockSharedMemory(pDbFd
, pShmNode
);
4454 if( rc
!=SQLITE_OK
&& rc
!=SQLITE_READONLY_CANTINIT
) goto shm_open_err
;
4458 /* Make the new connection a child of the unixShmNode */
4459 p
->pShmNode
= pShmNode
;
4461 p
->id
= pShmNode
->nextShmId
++;
4467 /* The reference count on pShmNode has already been incremented under
4468 ** the cover of the unixEnterMutex() mutex and the pointer from the
4469 ** new (struct unixShm) object to the pShmNode has been set. All that is
4470 ** left to do is to link the new object into the linked list starting
4471 ** at pShmNode->pFirst. This must be done while holding the pShmNode->mutex
4474 sqlite3_mutex_enter(pShmNode
->mutex
);
4475 p
->pNext
= pShmNode
->pFirst
;
4476 pShmNode
->pFirst
= p
;
4477 sqlite3_mutex_leave(pShmNode
->mutex
);
4480 /* Jump here on any error */
4482 unixShmPurge(pDbFd
); /* This call frees pShmNode if required */
4489 ** This function is called to obtain a pointer to region iRegion of the
4490 ** shared-memory associated with the database file fd. Shared-memory regions
4491 ** are numbered starting from zero. Each shared-memory region is szRegion
4494 ** If an error occurs, an error code is returned and *pp is set to NULL.
4496 ** Otherwise, if the bExtend parameter is 0 and the requested shared-memory
4497 ** region has not been allocated (by any client, including one running in a
4498 ** separate process), then *pp is set to NULL and SQLITE_OK returned. If
4499 ** bExtend is non-zero and the requested shared-memory region has not yet
4500 ** been allocated, it is allocated by this function.
4502 ** If the shared-memory region has already been allocated or is allocated by
4503 ** this call as described above, then it is mapped into this processes
4504 ** address space (if it is not already), *pp is set to point to the mapped
4505 ** memory and SQLITE_OK returned.
4507 static int unixShmMap(
4508 sqlite3_file
*fd
, /* Handle open on database file */
4509 int iRegion
, /* Region to retrieve */
4510 int szRegion
, /* Size of regions */
4511 int bExtend
, /* True to extend file if necessary */
4512 void volatile **pp
/* OUT: Mapped memory */
4514 unixFile
*pDbFd
= (unixFile
*)fd
;
4516 unixShmNode
*pShmNode
;
4518 int nShmPerMap
= unixShmRegionPerMap();
4521 /* If the shared-memory file has not yet been opened, open it now. */
4522 if( pDbFd
->pShm
==0 ){
4523 rc
= unixOpenSharedMemory(pDbFd
);
4524 if( rc
!=SQLITE_OK
) return rc
;
4528 pShmNode
= p
->pShmNode
;
4529 sqlite3_mutex_enter(pShmNode
->mutex
);
4530 if( pShmNode
->isUnlocked
){
4531 rc
= unixLockSharedMemory(pDbFd
, pShmNode
);
4532 if( rc
!=SQLITE_OK
) goto shmpage_out
;
4533 pShmNode
->isUnlocked
= 0;
4535 assert( szRegion
==pShmNode
->szRegion
|| pShmNode
->nRegion
==0 );
4536 assert( pShmNode
->pInode
==pDbFd
->pInode
);
4537 assert( pShmNode
->h
>=0 || pDbFd
->pInode
->bProcessLock
==1 );
4538 assert( pShmNode
->h
<0 || pDbFd
->pInode
->bProcessLock
==0 );
4540 /* Minimum number of regions required to be mapped. */
4541 nReqRegion
= ((iRegion
+nShmPerMap
) / nShmPerMap
) * nShmPerMap
;
4543 if( pShmNode
->nRegion
<nReqRegion
){
4544 char **apNew
; /* New apRegion[] array */
4545 int nByte
= nReqRegion
*szRegion
; /* Minimum required file size */
4546 struct stat sStat
; /* Used by fstat() */
4548 pShmNode
->szRegion
= szRegion
;
4550 if( pShmNode
->h
>=0 ){
4551 /* The requested region is not mapped into this processes address space.
4552 ** Check to see if it has been allocated (i.e. if the wal-index file is
4553 ** large enough to contain the requested region).
4555 if( osFstat(pShmNode
->h
, &sStat
) ){
4556 rc
= SQLITE_IOERR_SHMSIZE
;
4560 if( sStat
.st_size
<nByte
){
4561 /* The requested memory region does not exist. If bExtend is set to
4562 ** false, exit early. *pp will be set to NULL and SQLITE_OK returned.
4568 /* Alternatively, if bExtend is true, extend the file. Do this by
4569 ** writing a single byte to the end of each (OS) page being
4570 ** allocated or extended. Technically, we need only write to the
4571 ** last page in order to extend the file. But writing to all new
4572 ** pages forces the OS to allocate them immediately, which reduces
4573 ** the chances of SIGBUS while accessing the mapped region later on.
4576 static const int pgsz
= 4096;
4579 /* Write to the last byte of each newly allocated or extended page */
4580 assert( (nByte
% pgsz
)==0 );
4581 for(iPg
=(sStat
.st_size
/pgsz
); iPg
<(nByte
/pgsz
); iPg
++){
4583 if( seekAndWriteFd(pShmNode
->h
, iPg
*pgsz
+ pgsz
-1, "", 1, &x
)!=1 ){
4584 const char *zFile
= pShmNode
->zFilename
;
4585 rc
= unixLogError(SQLITE_IOERR_SHMSIZE
, "write", zFile
);
4593 /* Map the requested memory region into this processes address space. */
4594 apNew
= (char **)sqlite3_realloc(
4595 pShmNode
->apRegion
, nReqRegion
*sizeof(char *)
4598 rc
= SQLITE_IOERR_NOMEM_BKPT
;
4601 pShmNode
->apRegion
= apNew
;
4602 while( pShmNode
->nRegion
<nReqRegion
){
4603 int nMap
= szRegion
*nShmPerMap
;
4606 if( pShmNode
->h
>=0 ){
4607 pMem
= osMmap(0, nMap
,
4608 pShmNode
->isReadonly
? PROT_READ
: PROT_READ
|PROT_WRITE
,
4609 MAP_SHARED
, pShmNode
->h
, szRegion
*(i64
)pShmNode
->nRegion
4611 if( pMem
==MAP_FAILED
){
4612 rc
= unixLogError(SQLITE_IOERR_SHMMAP
, "mmap", pShmNode
->zFilename
);
4616 pMem
= sqlite3_malloc64(szRegion
);
4618 rc
= SQLITE_NOMEM_BKPT
;
4621 memset(pMem
, 0, szRegion
);
4624 for(i
=0; i
<nShmPerMap
; i
++){
4625 pShmNode
->apRegion
[pShmNode
->nRegion
+i
] = &((char*)pMem
)[szRegion
*i
];
4627 pShmNode
->nRegion
+= nShmPerMap
;
4632 if( pShmNode
->nRegion
>iRegion
){
4633 *pp
= pShmNode
->apRegion
[iRegion
];
4637 if( pShmNode
->isReadonly
&& rc
==SQLITE_OK
) rc
= SQLITE_READONLY
;
4638 sqlite3_mutex_leave(pShmNode
->mutex
);
4643 ** Change the lock state for a shared-memory segment.
4645 ** Note that the relationship between SHAREd and EXCLUSIVE locks is a little
4646 ** different here than in posix. In xShmLock(), one can go from unlocked
4647 ** to shared and back or from unlocked to exclusive and back. But one may
4648 ** not go from shared to exclusive or from exclusive to shared.
4650 static int unixShmLock(
4651 sqlite3_file
*fd
, /* Database file holding the shared memory */
4652 int ofst
, /* First lock to acquire or release */
4653 int n
, /* Number of locks to acquire or release */
4654 int flags
/* What to do with the lock */
4656 unixFile
*pDbFd
= (unixFile
*)fd
; /* Connection holding shared memory */
4657 unixShm
*p
= pDbFd
->pShm
; /* The shared memory being locked */
4658 unixShm
*pX
; /* For looping over all siblings */
4659 unixShmNode
*pShmNode
= p
->pShmNode
; /* The underlying file iNode */
4660 int rc
= SQLITE_OK
; /* Result code */
4661 u16 mask
; /* Mask of locks to take or release */
4663 assert( pShmNode
==pDbFd
->pInode
->pShmNode
);
4664 assert( pShmNode
->pInode
==pDbFd
->pInode
);
4665 assert( ofst
>=0 && ofst
+n
<=SQLITE_SHM_NLOCK
);
4667 assert( flags
==(SQLITE_SHM_LOCK
| SQLITE_SHM_SHARED
)
4668 || flags
==(SQLITE_SHM_LOCK
| SQLITE_SHM_EXCLUSIVE
)
4669 || flags
==(SQLITE_SHM_UNLOCK
| SQLITE_SHM_SHARED
)
4670 || flags
==(SQLITE_SHM_UNLOCK
| SQLITE_SHM_EXCLUSIVE
) );
4671 assert( n
==1 || (flags
& SQLITE_SHM_EXCLUSIVE
)!=0 );
4672 assert( pShmNode
->h
>=0 || pDbFd
->pInode
->bProcessLock
==1 );
4673 assert( pShmNode
->h
<0 || pDbFd
->pInode
->bProcessLock
==0 );
4675 mask
= (1<<(ofst
+n
)) - (1<<ofst
);
4676 assert( n
>1 || mask
==(1<<ofst
) );
4677 sqlite3_mutex_enter(pShmNode
->mutex
);
4678 if( flags
& SQLITE_SHM_UNLOCK
){
4679 u16 allMask
= 0; /* Mask of locks held by siblings */
4681 /* See if any siblings hold this same lock */
4682 for(pX
=pShmNode
->pFirst
; pX
; pX
=pX
->pNext
){
4683 if( pX
==p
) continue;
4684 assert( (pX
->exclMask
& (p
->exclMask
|p
->sharedMask
))==0 );
4685 allMask
|= pX
->sharedMask
;
4688 /* Unlock the system-level locks */
4689 if( (mask
& allMask
)==0 ){
4690 rc
= unixShmSystemLock(pDbFd
, F_UNLCK
, ofst
+UNIX_SHM_BASE
, n
);
4695 /* Undo the local locks */
4696 if( rc
==SQLITE_OK
){
4697 p
->exclMask
&= ~mask
;
4698 p
->sharedMask
&= ~mask
;
4700 }else if( flags
& SQLITE_SHM_SHARED
){
4701 u16 allShared
= 0; /* Union of locks held by connections other than "p" */
4703 /* Find out which shared locks are already held by sibling connections.
4704 ** If any sibling already holds an exclusive lock, go ahead and return
4707 for(pX
=pShmNode
->pFirst
; pX
; pX
=pX
->pNext
){
4708 if( (pX
->exclMask
& mask
)!=0 ){
4712 allShared
|= pX
->sharedMask
;
4715 /* Get shared locks at the system level, if necessary */
4716 if( rc
==SQLITE_OK
){
4717 if( (allShared
& mask
)==0 ){
4718 rc
= unixShmSystemLock(pDbFd
, F_RDLCK
, ofst
+UNIX_SHM_BASE
, n
);
4724 /* Get the local shared locks */
4725 if( rc
==SQLITE_OK
){
4726 p
->sharedMask
|= mask
;
4729 /* Make sure no sibling connections hold locks that will block this
4730 ** lock. If any do, return SQLITE_BUSY right away.
4732 for(pX
=pShmNode
->pFirst
; pX
; pX
=pX
->pNext
){
4733 if( (pX
->exclMask
& mask
)!=0 || (pX
->sharedMask
& mask
)!=0 ){
4739 /* Get the exclusive locks at the system level. Then if successful
4740 ** also mark the local connection as being locked.
4742 if( rc
==SQLITE_OK
){
4743 rc
= unixShmSystemLock(pDbFd
, F_WRLCK
, ofst
+UNIX_SHM_BASE
, n
);
4744 if( rc
==SQLITE_OK
){
4745 assert( (p
->sharedMask
& mask
)==0 );
4746 p
->exclMask
|= mask
;
4750 sqlite3_mutex_leave(pShmNode
->mutex
);
4751 OSTRACE(("SHM-LOCK shmid-%d, pid-%d got %03x,%03x\n",
4752 p
->id
, osGetpid(0), p
->sharedMask
, p
->exclMask
));
4757 ** Implement a memory barrier or memory fence on shared memory.
4759 ** All loads and stores begun before the barrier must complete before
4760 ** any load or store begun after the barrier.
4762 static void unixShmBarrier(
4763 sqlite3_file
*fd
/* Database file holding the shared memory */
4765 UNUSED_PARAMETER(fd
);
4766 sqlite3MemoryBarrier(); /* compiler-defined memory barrier */
4767 unixEnterMutex(); /* Also mutex, for redundancy */
4772 ** Close a connection to shared-memory. Delete the underlying
4773 ** storage if deleteFlag is true.
4775 ** If there is no shared memory associated with the connection then this
4776 ** routine is a harmless no-op.
4778 static int unixShmUnmap(
4779 sqlite3_file
*fd
, /* The underlying database file */
4780 int deleteFlag
/* Delete shared-memory if true */
4782 unixShm
*p
; /* The connection to be closed */
4783 unixShmNode
*pShmNode
; /* The underlying shared-memory file */
4784 unixShm
**pp
; /* For looping over sibling connections */
4785 unixFile
*pDbFd
; /* The underlying database file */
4787 pDbFd
= (unixFile
*)fd
;
4789 if( p
==0 ) return SQLITE_OK
;
4790 pShmNode
= p
->pShmNode
;
4792 assert( pShmNode
==pDbFd
->pInode
->pShmNode
);
4793 assert( pShmNode
->pInode
==pDbFd
->pInode
);
4795 /* Remove connection p from the set of connections associated
4797 sqlite3_mutex_enter(pShmNode
->mutex
);
4798 for(pp
=&pShmNode
->pFirst
; (*pp
)!=p
; pp
= &(*pp
)->pNext
){}
4801 /* Free the connection p */
4804 sqlite3_mutex_leave(pShmNode
->mutex
);
4806 /* If pShmNode->nRef has reached 0, then close the underlying
4807 ** shared-memory file, too */
4809 assert( pShmNode
->nRef
>0 );
4811 if( pShmNode
->nRef
==0 ){
4812 if( deleteFlag
&& pShmNode
->h
>=0 ){
4813 osUnlink(pShmNode
->zFilename
);
4815 unixShmPurge(pDbFd
);
4824 # define unixShmMap 0
4825 # define unixShmLock 0
4826 # define unixShmBarrier 0
4827 # define unixShmUnmap 0
4828 #endif /* #ifndef SQLITE_OMIT_WAL */
4830 #if SQLITE_MAX_MMAP_SIZE>0
4832 ** If it is currently memory mapped, unmap file pFd.
4834 static void unixUnmapfile(unixFile
*pFd
){
4835 assert( pFd
->nFetchOut
==0 );
4836 if( pFd
->pMapRegion
){
4837 osMunmap(pFd
->pMapRegion
, pFd
->mmapSizeActual
);
4838 pFd
->pMapRegion
= 0;
4840 pFd
->mmapSizeActual
= 0;
4845 ** Attempt to set the size of the memory mapping maintained by file
4846 ** descriptor pFd to nNew bytes. Any existing mapping is discarded.
4848 ** If successful, this function sets the following variables:
4850 ** unixFile.pMapRegion
4851 ** unixFile.mmapSize
4852 ** unixFile.mmapSizeActual
4854 ** If unsuccessful, an error message is logged via sqlite3_log() and
4855 ** the three variables above are zeroed. In this case SQLite should
4856 ** continue accessing the database using the xRead() and xWrite()
4859 static void unixRemapfile(
4860 unixFile
*pFd
, /* File descriptor object */
4861 i64 nNew
/* Required mapping size */
4863 const char *zErr
= "mmap";
4864 int h
= pFd
->h
; /* File descriptor open on db file */
4865 u8
*pOrig
= (u8
*)pFd
->pMapRegion
; /* Pointer to current file mapping */
4866 i64 nOrig
= pFd
->mmapSizeActual
; /* Size of pOrig region in bytes */
4867 u8
*pNew
= 0; /* Location of new mapping */
4868 int flags
= PROT_READ
; /* Flags to pass to mmap() */
4870 assert( pFd
->nFetchOut
==0 );
4871 assert( nNew
>pFd
->mmapSize
);
4872 assert( nNew
<=pFd
->mmapSizeMax
);
4874 assert( pFd
->mmapSizeActual
>=pFd
->mmapSize
);
4875 assert( MAP_FAILED
!=0 );
4877 #ifdef SQLITE_MMAP_READWRITE
4878 if( (pFd
->ctrlFlags
& UNIXFILE_RDONLY
)==0 ) flags
|= PROT_WRITE
;
4883 i64 nReuse
= pFd
->mmapSize
;
4885 const int szSyspage
= osGetpagesize();
4886 i64 nReuse
= (pFd
->mmapSize
& ~(szSyspage
-1));
4888 u8
*pReq
= &pOrig
[nReuse
];
4890 /* Unmap any pages of the existing mapping that cannot be reused. */
4891 if( nReuse
!=nOrig
){
4892 osMunmap(pReq
, nOrig
-nReuse
);
4896 pNew
= osMremap(pOrig
, nReuse
, nNew
, MREMAP_MAYMOVE
);
4899 pNew
= osMmap(pReq
, nNew
-nReuse
, flags
, MAP_SHARED
, h
, nReuse
);
4900 if( pNew
!=MAP_FAILED
){
4902 osMunmap(pNew
, nNew
- nReuse
);
4910 /* The attempt to extend the existing mapping failed. Free it. */
4911 if( pNew
==MAP_FAILED
|| pNew
==0 ){
4912 osMunmap(pOrig
, nReuse
);
4916 /* If pNew is still NULL, try to create an entirely new mapping. */
4918 pNew
= osMmap(0, nNew
, flags
, MAP_SHARED
, h
, 0);
4921 if( pNew
==MAP_FAILED
){
4924 unixLogError(SQLITE_OK
, zErr
, pFd
->zPath
);
4926 /* If the mmap() above failed, assume that all subsequent mmap() calls
4927 ** will probably fail too. Fall back to using xRead/xWrite exclusively
4929 pFd
->mmapSizeMax
= 0;
4931 pFd
->pMapRegion
= (void *)pNew
;
4932 pFd
->mmapSize
= pFd
->mmapSizeActual
= nNew
;
4936 ** Memory map or remap the file opened by file-descriptor pFd (if the file
4937 ** is already mapped, the existing mapping is replaced by the new). Or, if
4938 ** there already exists a mapping for this file, and there are still
4939 ** outstanding xFetch() references to it, this function is a no-op.
4941 ** If parameter nByte is non-negative, then it is the requested size of
4942 ** the mapping to create. Otherwise, if nByte is less than zero, then the
4943 ** requested size is the size of the file on disk. The actual size of the
4944 ** created mapping is either the requested size or the value configured
4945 ** using SQLITE_FCNTL_MMAP_LIMIT, whichever is smaller.
4947 ** SQLITE_OK is returned if no error occurs (even if the mapping is not
4948 ** recreated as a result of outstanding references) or an SQLite error
4951 static int unixMapfile(unixFile
*pFd
, i64 nMap
){
4952 assert( nMap
>=0 || pFd
->nFetchOut
==0 );
4953 assert( nMap
>0 || (pFd
->mmapSize
==0 && pFd
->pMapRegion
==0) );
4954 if( pFd
->nFetchOut
>0 ) return SQLITE_OK
;
4957 struct stat statbuf
; /* Low-level file information */
4958 if( osFstat(pFd
->h
, &statbuf
) ){
4959 return SQLITE_IOERR_FSTAT
;
4961 nMap
= statbuf
.st_size
;
4963 if( nMap
>pFd
->mmapSizeMax
){
4964 nMap
= pFd
->mmapSizeMax
;
4967 assert( nMap
>0 || (pFd
->mmapSize
==0 && pFd
->pMapRegion
==0) );
4968 if( nMap
!=pFd
->mmapSize
){
4969 unixRemapfile(pFd
, nMap
);
4974 #endif /* SQLITE_MAX_MMAP_SIZE>0 */
4977 ** If possible, return a pointer to a mapping of file fd starting at offset
4978 ** iOff. The mapping must be valid for at least nAmt bytes.
4980 ** If such a pointer can be obtained, store it in *pp and return SQLITE_OK.
4981 ** Or, if one cannot but no error occurs, set *pp to 0 and return SQLITE_OK.
4982 ** Finally, if an error does occur, return an SQLite error code. The final
4983 ** value of *pp is undefined in this case.
4985 ** If this function does return a pointer, the caller must eventually
4986 ** release the reference by calling unixUnfetch().
4988 static int unixFetch(sqlite3_file
*fd
, i64 iOff
, int nAmt
, void **pp
){
4989 #if SQLITE_MAX_MMAP_SIZE>0
4990 unixFile
*pFd
= (unixFile
*)fd
; /* The underlying database file */
4994 #if SQLITE_MAX_MMAP_SIZE>0
4995 if( pFd
->mmapSizeMax
>0 ){
4996 if( pFd
->pMapRegion
==0 ){
4997 int rc
= unixMapfile(pFd
, -1);
4998 if( rc
!=SQLITE_OK
) return rc
;
5000 if( pFd
->mmapSize
>= iOff
+nAmt
){
5001 *pp
= &((u8
*)pFd
->pMapRegion
)[iOff
];
5010 ** If the third argument is non-NULL, then this function releases a
5011 ** reference obtained by an earlier call to unixFetch(). The second
5012 ** argument passed to this function must be the same as the corresponding
5013 ** argument that was passed to the unixFetch() invocation.
5015 ** Or, if the third argument is NULL, then this function is being called
5016 ** to inform the VFS layer that, according to POSIX, any existing mapping
5017 ** may now be invalid and should be unmapped.
5019 static int unixUnfetch(sqlite3_file
*fd
, i64 iOff
, void *p
){
5020 #if SQLITE_MAX_MMAP_SIZE>0
5021 unixFile
*pFd
= (unixFile
*)fd
; /* The underlying database file */
5022 UNUSED_PARAMETER(iOff
);
5024 /* If p==0 (unmap the entire file) then there must be no outstanding
5025 ** xFetch references. Or, if p!=0 (meaning it is an xFetch reference),
5026 ** then there must be at least one outstanding. */
5027 assert( (p
==0)==(pFd
->nFetchOut
==0) );
5029 /* If p!=0, it must match the iOff value. */
5030 assert( p
==0 || p
==&((u8
*)pFd
->pMapRegion
)[iOff
] );
5038 assert( pFd
->nFetchOut
>=0 );
5040 UNUSED_PARAMETER(fd
);
5041 UNUSED_PARAMETER(p
);
5042 UNUSED_PARAMETER(iOff
);
5048 ** Here ends the implementation of all sqlite3_file methods.
5050 ********************** End sqlite3_file Methods *******************************
5051 ******************************************************************************/
5054 ** This division contains definitions of sqlite3_io_methods objects that
5055 ** implement various file locking strategies. It also contains definitions
5056 ** of "finder" functions. A finder-function is used to locate the appropriate
5057 ** sqlite3_io_methods object for a particular database file. The pAppData
5058 ** field of the sqlite3_vfs VFS objects are initialized to be pointers to
5059 ** the correct finder-function for that VFS.
5061 ** Most finder functions return a pointer to a fixed sqlite3_io_methods
5062 ** object. The only interesting finder-function is autolockIoFinder, which
5063 ** looks at the filesystem type and tries to guess the best locking
5064 ** strategy from that.
5066 ** For finder-function F, two objects are created:
5068 ** (1) The real finder-function named "FImpt()".
5070 ** (2) A constant pointer to this function named just "F".
5073 ** A pointer to the F pointer is used as the pAppData value for VFS
5074 ** objects. We have to do this instead of letting pAppData point
5075 ** directly at the finder-function since C90 rules prevent a void*
5076 ** from be cast into a function pointer.
5079 ** Each instance of this macro generates two objects:
5081 ** * A constant sqlite3_io_methods object call METHOD that has locking
5082 ** methods CLOSE, LOCK, UNLOCK, CKRESLOCK.
5084 ** * An I/O method finder function called FINDER that returns a pointer
5085 ** to the METHOD object in the previous bullet.
5087 #define IOMETHODS(FINDER,METHOD,VERSION,CLOSE,LOCK,UNLOCK,CKLOCK,SHMMAP) \
5088 static const sqlite3_io_methods METHOD = { \
5089 VERSION, /* iVersion */ \
5090 CLOSE, /* xClose */ \
5091 unixRead, /* xRead */ \
5092 unixWrite, /* xWrite */ \
5093 unixTruncate, /* xTruncate */ \
5094 unixSync, /* xSync */ \
5095 unixFileSize, /* xFileSize */ \
5097 UNLOCK, /* xUnlock */ \
5098 CKLOCK, /* xCheckReservedLock */ \
5099 unixFileControl, /* xFileControl */ \
5100 unixSectorSize, /* xSectorSize */ \
5101 unixDeviceCharacteristics, /* xDeviceCapabilities */ \
5102 SHMMAP, /* xShmMap */ \
5103 unixShmLock, /* xShmLock */ \
5104 unixShmBarrier, /* xShmBarrier */ \
5105 unixShmUnmap, /* xShmUnmap */ \
5106 unixFetch, /* xFetch */ \
5107 unixUnfetch, /* xUnfetch */ \
5109 static const sqlite3_io_methods *FINDER##Impl(const char *z, unixFile *p){ \
5110 UNUSED_PARAMETER(z); UNUSED_PARAMETER(p); \
5113 static const sqlite3_io_methods *(*const FINDER)(const char*,unixFile *p) \
5117 ** Here are all of the sqlite3_io_methods objects for each of the
5118 ** locking strategies. Functions that return pointers to these methods
5119 ** are also created.
5122 posixIoFinder
, /* Finder function name */
5123 posixIoMethods
, /* sqlite3_io_methods object name */
5124 3, /* shared memory and mmap are enabled */
5125 unixClose
, /* xClose method */
5126 unixLock
, /* xLock method */
5127 unixUnlock
, /* xUnlock method */
5128 unixCheckReservedLock
, /* xCheckReservedLock method */
5129 unixShmMap
/* xShmMap method */
5132 nolockIoFinder
, /* Finder function name */
5133 nolockIoMethods
, /* sqlite3_io_methods object name */
5134 3, /* shared memory is disabled */
5135 nolockClose
, /* xClose method */
5136 nolockLock
, /* xLock method */
5137 nolockUnlock
, /* xUnlock method */
5138 nolockCheckReservedLock
, /* xCheckReservedLock method */
5139 0 /* xShmMap method */
5142 dotlockIoFinder
, /* Finder function name */
5143 dotlockIoMethods
, /* sqlite3_io_methods object name */
5144 1, /* shared memory is disabled */
5145 dotlockClose
, /* xClose method */
5146 dotlockLock
, /* xLock method */
5147 dotlockUnlock
, /* xUnlock method */
5148 dotlockCheckReservedLock
, /* xCheckReservedLock method */
5149 0 /* xShmMap method */
5152 #if SQLITE_ENABLE_LOCKING_STYLE
5154 flockIoFinder
, /* Finder function name */
5155 flockIoMethods
, /* sqlite3_io_methods object name */
5156 1, /* shared memory is disabled */
5157 flockClose
, /* xClose method */
5158 flockLock
, /* xLock method */
5159 flockUnlock
, /* xUnlock method */
5160 flockCheckReservedLock
, /* xCheckReservedLock method */
5161 0 /* xShmMap method */
5167 semIoFinder
, /* Finder function name */
5168 semIoMethods
, /* sqlite3_io_methods object name */
5169 1, /* shared memory is disabled */
5170 semXClose
, /* xClose method */
5171 semXLock
, /* xLock method */
5172 semXUnlock
, /* xUnlock method */
5173 semXCheckReservedLock
, /* xCheckReservedLock method */
5174 0 /* xShmMap method */
5178 #if defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE
5180 afpIoFinder
, /* Finder function name */
5181 afpIoMethods
, /* sqlite3_io_methods object name */
5182 1, /* shared memory is disabled */
5183 afpClose
, /* xClose method */
5184 afpLock
, /* xLock method */
5185 afpUnlock
, /* xUnlock method */
5186 afpCheckReservedLock
, /* xCheckReservedLock method */
5187 0 /* xShmMap method */
5192 ** The proxy locking method is a "super-method" in the sense that it
5193 ** opens secondary file descriptors for the conch and lock files and
5194 ** it uses proxy, dot-file, AFP, and flock() locking methods on those
5195 ** secondary files. For this reason, the division that implements
5196 ** proxy locking is located much further down in the file. But we need
5197 ** to go ahead and define the sqlite3_io_methods and finder function
5198 ** for proxy locking here. So we forward declare the I/O methods.
5200 #if defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE
5201 static int proxyClose(sqlite3_file
*);
5202 static int proxyLock(sqlite3_file
*, int);
5203 static int proxyUnlock(sqlite3_file
*, int);
5204 static int proxyCheckReservedLock(sqlite3_file
*, int*);
5206 proxyIoFinder
, /* Finder function name */
5207 proxyIoMethods
, /* sqlite3_io_methods object name */
5208 1, /* shared memory is disabled */
5209 proxyClose
, /* xClose method */
5210 proxyLock
, /* xLock method */
5211 proxyUnlock
, /* xUnlock method */
5212 proxyCheckReservedLock
, /* xCheckReservedLock method */
5213 0 /* xShmMap method */
5217 /* nfs lockd on OSX 10.3+ doesn't clear write locks when a read lock is set */
5218 #if defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE
5220 nfsIoFinder
, /* Finder function name */
5221 nfsIoMethods
, /* sqlite3_io_methods object name */
5222 1, /* shared memory is disabled */
5223 unixClose
, /* xClose method */
5224 unixLock
, /* xLock method */
5225 nfsUnlock
, /* xUnlock method */
5226 unixCheckReservedLock
, /* xCheckReservedLock method */
5227 0 /* xShmMap method */
5231 #if defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE
5233 ** This "finder" function attempts to determine the best locking strategy
5234 ** for the database file "filePath". It then returns the sqlite3_io_methods
5235 ** object that implements that strategy.
5237 ** This is for MacOSX only.
5239 static const sqlite3_io_methods
*autolockIoFinderImpl(
5240 const char *filePath
, /* name of the database file */
5241 unixFile
*pNew
/* open file object for the database file */
5243 static const struct Mapping
{
5244 const char *zFilesystem
; /* Filesystem type name */
5245 const sqlite3_io_methods
*pMethods
; /* Appropriate locking method */
5247 { "hfs", &posixIoMethods
},
5248 { "ufs", &posixIoMethods
},
5249 { "afpfs", &afpIoMethods
},
5250 { "smbfs", &afpIoMethods
},
5251 { "webdav", &nolockIoMethods
},
5255 struct statfs fsInfo
;
5256 struct flock lockInfo
;
5259 /* If filePath==NULL that means we are dealing with a transient file
5260 ** that does not need to be locked. */
5261 return &nolockIoMethods
;
5263 if( statfs(filePath
, &fsInfo
) != -1 ){
5264 if( fsInfo
.f_flags
& MNT_RDONLY
){
5265 return &nolockIoMethods
;
5267 for(i
=0; aMap
[i
].zFilesystem
; i
++){
5268 if( strcmp(fsInfo
.f_fstypename
, aMap
[i
].zFilesystem
)==0 ){
5269 return aMap
[i
].pMethods
;
5274 /* Default case. Handles, amongst others, "nfs".
5275 ** Test byte-range lock using fcntl(). If the call succeeds,
5276 ** assume that the file-system supports POSIX style locks.
5279 lockInfo
.l_start
= 0;
5280 lockInfo
.l_whence
= SEEK_SET
;
5281 lockInfo
.l_type
= F_RDLCK
;
5282 if( osFcntl(pNew
->h
, F_GETLK
, &lockInfo
)!=-1 ) {
5283 if( strcmp(fsInfo
.f_fstypename
, "nfs")==0 ){
5284 return &nfsIoMethods
;
5286 return &posixIoMethods
;
5289 return &dotlockIoMethods
;
5292 static const sqlite3_io_methods
5293 *(*const autolockIoFinder
)(const char*,unixFile
*) = autolockIoFinderImpl
;
5295 #endif /* defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE */
5299 ** This "finder" function for VxWorks checks to see if posix advisory
5300 ** locking works. If it does, then that is what is used. If it does not
5301 ** work, then fallback to named semaphore locking.
5303 static const sqlite3_io_methods
*vxworksIoFinderImpl(
5304 const char *filePath
, /* name of the database file */
5305 unixFile
*pNew
/* the open file object */
5307 struct flock lockInfo
;
5310 /* If filePath==NULL that means we are dealing with a transient file
5311 ** that does not need to be locked. */
5312 return &nolockIoMethods
;
5315 /* Test if fcntl() is supported and use POSIX style locks.
5316 ** Otherwise fall back to the named semaphore method.
5319 lockInfo
.l_start
= 0;
5320 lockInfo
.l_whence
= SEEK_SET
;
5321 lockInfo
.l_type
= F_RDLCK
;
5322 if( osFcntl(pNew
->h
, F_GETLK
, &lockInfo
)!=-1 ) {
5323 return &posixIoMethods
;
5325 return &semIoMethods
;
5328 static const sqlite3_io_methods
5329 *(*const vxworksIoFinder
)(const char*,unixFile
*) = vxworksIoFinderImpl
;
5331 #endif /* OS_VXWORKS */
5334 ** An abstract type for a pointer to an IO method finder function:
5336 typedef const sqlite3_io_methods
*(*finder_type
)(const char*,unixFile
*);
5339 /****************************************************************************
5340 **************************** sqlite3_vfs methods ****************************
5342 ** This division contains the implementation of methods on the
5343 ** sqlite3_vfs object.
5347 ** Initialize the contents of the unixFile structure pointed to by pId.
5349 static int fillInUnixFile(
5350 sqlite3_vfs
*pVfs
, /* Pointer to vfs object */
5351 int h
, /* Open file descriptor of file being opened */
5352 sqlite3_file
*pId
, /* Write to the unixFile structure here */
5353 const char *zFilename
, /* Name of the file being opened */
5354 int ctrlFlags
/* Zero or more UNIXFILE_* values */
5356 const sqlite3_io_methods
*pLockingStyle
;
5357 unixFile
*pNew
= (unixFile
*)pId
;
5360 assert( pNew
->pInode
==NULL
);
5362 /* No locking occurs in temporary files */
5363 assert( zFilename
!=0 || (ctrlFlags
& UNIXFILE_NOLOCK
)!=0 );
5365 OSTRACE(("OPEN %-3d %s\n", h
, zFilename
));
5368 pNew
->zPath
= zFilename
;
5369 pNew
->ctrlFlags
= (u8
)ctrlFlags
;
5370 #if SQLITE_MAX_MMAP_SIZE>0
5371 pNew
->mmapSizeMax
= sqlite3GlobalConfig
.szMmap
;
5373 if( sqlite3_uri_boolean(((ctrlFlags
& UNIXFILE_URI
) ? zFilename
: 0),
5374 "psow", SQLITE_POWERSAFE_OVERWRITE
) ){
5375 pNew
->ctrlFlags
|= UNIXFILE_PSOW
;
5377 if( strcmp(pVfs
->zName
,"unix-excl")==0 ){
5378 pNew
->ctrlFlags
|= UNIXFILE_EXCL
;
5382 pNew
->pId
= vxworksFindFileId(zFilename
);
5384 ctrlFlags
|= UNIXFILE_NOLOCK
;
5385 rc
= SQLITE_NOMEM_BKPT
;
5389 if( ctrlFlags
& UNIXFILE_NOLOCK
){
5390 pLockingStyle
= &nolockIoMethods
;
5392 pLockingStyle
= (**(finder_type
*)pVfs
->pAppData
)(zFilename
, pNew
);
5393 #if SQLITE_ENABLE_LOCKING_STYLE
5394 /* Cache zFilename in the locking context (AFP and dotlock override) for
5395 ** proxyLock activation is possible (remote proxy is based on db name)
5396 ** zFilename remains valid until file is closed, to support */
5397 pNew
->lockingContext
= (void*)zFilename
;
5401 if( pLockingStyle
== &posixIoMethods
5402 #if defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE
5403 || pLockingStyle
== &nfsIoMethods
5407 rc
= findInodeInfo(pNew
, &pNew
->pInode
);
5408 if( rc
!=SQLITE_OK
){
5409 /* If an error occurred in findInodeInfo(), close the file descriptor
5410 ** immediately, before releasing the mutex. findInodeInfo() may fail
5411 ** in two scenarios:
5413 ** (a) A call to fstat() failed.
5414 ** (b) A malloc failed.
5416 ** Scenario (b) may only occur if the process is holding no other
5417 ** file descriptors open on the same file. If there were other file
5418 ** descriptors on this file, then no malloc would be required by
5419 ** findInodeInfo(). If this is the case, it is quite safe to close
5420 ** handle h - as it is guaranteed that no posix locks will be released
5423 ** If scenario (a) caused the error then things are not so safe. The
5424 ** implicit assumption here is that if fstat() fails, things are in
5425 ** such bad shape that dropping a lock or two doesn't matter much.
5427 robust_close(pNew
, h
, __LINE__
);
5433 #if SQLITE_ENABLE_LOCKING_STYLE && defined(__APPLE__)
5434 else if( pLockingStyle
== &afpIoMethods
){
5435 /* AFP locking uses the file path so it needs to be included in
5436 ** the afpLockingContext.
5438 afpLockingContext
*pCtx
;
5439 pNew
->lockingContext
= pCtx
= sqlite3_malloc64( sizeof(*pCtx
) );
5441 rc
= SQLITE_NOMEM_BKPT
;
5443 /* NB: zFilename exists and remains valid until the file is closed
5444 ** according to requirement F11141. So we do not need to make a
5445 ** copy of the filename. */
5446 pCtx
->dbPath
= zFilename
;
5450 rc
= findInodeInfo(pNew
, &pNew
->pInode
);
5451 if( rc
!=SQLITE_OK
){
5452 sqlite3_free(pNew
->lockingContext
);
5453 robust_close(pNew
, h
, __LINE__
);
5461 else if( pLockingStyle
== &dotlockIoMethods
){
5462 /* Dotfile locking uses the file path so it needs to be included in
5463 ** the dotlockLockingContext
5467 assert( zFilename
!=0 );
5468 nFilename
= (int)strlen(zFilename
) + 6;
5469 zLockFile
= (char *)sqlite3_malloc64(nFilename
);
5471 rc
= SQLITE_NOMEM_BKPT
;
5473 sqlite3_snprintf(nFilename
, zLockFile
, "%s" DOTLOCK_SUFFIX
, zFilename
);
5475 pNew
->lockingContext
= zLockFile
;
5479 else if( pLockingStyle
== &semIoMethods
){
5480 /* Named semaphore locking uses the file path so it needs to be
5481 ** included in the semLockingContext
5484 rc
= findInodeInfo(pNew
, &pNew
->pInode
);
5485 if( (rc
==SQLITE_OK
) && (pNew
->pInode
->pSem
==NULL
) ){
5486 char *zSemName
= pNew
->pInode
->aSemName
;
5488 sqlite3_snprintf(MAX_PATHNAME
, zSemName
, "/%s.sem",
5489 pNew
->pId
->zCanonicalName
);
5490 for( n
=1; zSemName
[n
]; n
++ )
5491 if( zSemName
[n
]=='/' ) zSemName
[n
] = '_';
5492 pNew
->pInode
->pSem
= sem_open(zSemName
, O_CREAT
, 0666, 1);
5493 if( pNew
->pInode
->pSem
== SEM_FAILED
){
5494 rc
= SQLITE_NOMEM_BKPT
;
5495 pNew
->pInode
->aSemName
[0] = '\0';
5502 storeLastErrno(pNew
, 0);
5504 if( rc
!=SQLITE_OK
){
5505 if( h
>=0 ) robust_close(pNew
, h
, __LINE__
);
5507 osUnlink(zFilename
);
5508 pNew
->ctrlFlags
|= UNIXFILE_DELETE
;
5511 if( rc
!=SQLITE_OK
){
5512 if( h
>=0 ) robust_close(pNew
, h
, __LINE__
);
5514 pNew
->pMethod
= pLockingStyle
;
5522 ** Return the name of a directory in which to put temporary files.
5523 ** If no suitable temporary file directory can be found, return NULL.
5525 static const char *unixTempFileDir(void){
5526 static const char *azDirs
[] = {
5536 const char *zDir
= sqlite3_temp_directory
;
5538 if( !azDirs
[0] ) azDirs
[0] = getenv("SQLITE_TMPDIR");
5539 if( !azDirs
[1] ) azDirs
[1] = getenv("TMPDIR");
5542 && osStat(zDir
, &buf
)==0
5543 && S_ISDIR(buf
.st_mode
)
5544 && osAccess(zDir
, 03)==0
5548 if( i
>=sizeof(azDirs
)/sizeof(azDirs
[0]) ) break;
5555 ** Create a temporary file name in zBuf. zBuf must be allocated
5556 ** by the calling process and must be big enough to hold at least
5557 ** pVfs->mxPathname bytes.
5559 static int unixGetTempname(int nBuf
, char *zBuf
){
5563 /* It's odd to simulate an io-error here, but really this is just
5564 ** using the io-error infrastructure to test that SQLite handles this
5565 ** function failing.
5568 SimulateIOError( return SQLITE_IOERR
);
5570 zDir
= unixTempFileDir();
5571 if( zDir
==0 ) return SQLITE_IOERR_GETTEMPPATH
;
5574 sqlite3_randomness(sizeof(r
), &r
);
5577 sqlite3_snprintf(nBuf
, zBuf
, "%s/"SQLITE_TEMP_FILE_PREFIX
"%llx%c",
5579 if( zBuf
[nBuf
-2]!=0 || (iLimit
++)>10 ) return SQLITE_ERROR
;
5580 }while( osAccess(zBuf
,0)==0 );
5584 #if SQLITE_ENABLE_LOCKING_STYLE && defined(__APPLE__)
5586 ** Routine to transform a unixFile into a proxy-locking unixFile.
5587 ** Implementation in the proxy-lock division, but used by unixOpen()
5588 ** if SQLITE_PREFER_PROXY_LOCKING is defined.
5590 static int proxyTransformUnixFile(unixFile
*, const char*);
5594 ** Search for an unused file descriptor that was opened on the database
5595 ** file (not a journal or master-journal file) identified by pathname
5596 ** zPath with SQLITE_OPEN_XXX flags matching those passed as the second
5597 ** argument to this function.
5599 ** Such a file descriptor may exist if a database connection was closed
5600 ** but the associated file descriptor could not be closed because some
5601 ** other file descriptor open on the same file is holding a file-lock.
5602 ** Refer to comments in the unixClose() function and the lengthy comment
5603 ** describing "Posix Advisory Locking" at the start of this file for
5604 ** further details. Also, ticket #4018.
5606 ** If a suitable file descriptor is found, then it is returned. If no
5607 ** such file descriptor is located, -1 is returned.
5609 static UnixUnusedFd
*findReusableFd(const char *zPath
, int flags
){
5610 UnixUnusedFd
*pUnused
= 0;
5612 /* Do not search for an unused file descriptor on vxworks. Not because
5613 ** vxworks would not benefit from the change (it might, we're not sure),
5614 ** but because no way to test it is currently available. It is better
5615 ** not to risk breaking vxworks support for the sake of such an obscure
5618 struct stat sStat
; /* Results of stat() call */
5622 /* A stat() call may fail for various reasons. If this happens, it is
5623 ** almost certain that an open() call on the same path will also fail.
5624 ** For this reason, if an error occurs in the stat() call here, it is
5625 ** ignored and -1 is returned. The caller will try to open a new file
5626 ** descriptor on the same path, fail, and return an error to SQLite.
5628 ** Even if a subsequent open() call does succeed, the consequences of
5629 ** not searching for a reusable file descriptor are not dire. */
5630 if( nUnusedFd
>0 && 0==osStat(zPath
, &sStat
) ){
5631 unixInodeInfo
*pInode
;
5634 while( pInode
&& (pInode
->fileId
.dev
!=sStat
.st_dev
5635 || pInode
->fileId
.ino
!=(u64
)sStat
.st_ino
) ){
5636 pInode
= pInode
->pNext
;
5640 for(pp
=&pInode
->pUnused
; *pp
&& (*pp
)->flags
!=flags
; pp
=&((*pp
)->pNext
));
5644 *pp
= pUnused
->pNext
;
5649 #endif /* if !OS_VXWORKS */
5654 ** Find the mode, uid and gid of file zFile.
5656 static int getFileMode(
5657 const char *zFile
, /* File name */
5658 mode_t
*pMode
, /* OUT: Permissions of zFile */
5659 uid_t
*pUid
, /* OUT: uid of zFile. */
5660 gid_t
*pGid
/* OUT: gid of zFile. */
5662 struct stat sStat
; /* Output of stat() on database file */
5664 if( 0==osStat(zFile
, &sStat
) ){
5665 *pMode
= sStat
.st_mode
& 0777;
5666 *pUid
= sStat
.st_uid
;
5667 *pGid
= sStat
.st_gid
;
5669 rc
= SQLITE_IOERR_FSTAT
;
5675 ** This function is called by unixOpen() to determine the unix permissions
5676 ** to create new files with. If no error occurs, then SQLITE_OK is returned
5677 ** and a value suitable for passing as the third argument to open(2) is
5678 ** written to *pMode. If an IO error occurs, an SQLite error code is
5679 ** returned and the value of *pMode is not modified.
5681 ** In most cases, this routine sets *pMode to 0, which will become
5682 ** an indication to robust_open() to create the file using
5683 ** SQLITE_DEFAULT_FILE_PERMISSIONS adjusted by the umask.
5684 ** But if the file being opened is a WAL or regular journal file, then
5685 ** this function queries the file-system for the permissions on the
5686 ** corresponding database file and sets *pMode to this value. Whenever
5687 ** possible, WAL and journal files are created using the same permissions
5688 ** as the associated database file.
5690 ** If the SQLITE_ENABLE_8_3_NAMES option is enabled, then the
5691 ** original filename is unavailable. But 8_3_NAMES is only used for
5692 ** FAT filesystems and permissions do not matter there, so just use
5693 ** the default permissions.
5695 static int findCreateFileMode(
5696 const char *zPath
, /* Path of file (possibly) being created */
5697 int flags
, /* Flags passed as 4th argument to xOpen() */
5698 mode_t
*pMode
, /* OUT: Permissions to open file with */
5699 uid_t
*pUid
, /* OUT: uid to set on the file */
5700 gid_t
*pGid
/* OUT: gid to set on the file */
5702 int rc
= SQLITE_OK
; /* Return Code */
5706 if( flags
& (SQLITE_OPEN_WAL
|SQLITE_OPEN_MAIN_JOURNAL
) ){
5707 char zDb
[MAX_PATHNAME
+1]; /* Database file path */
5708 int nDb
; /* Number of valid bytes in zDb */
5710 /* zPath is a path to a WAL or journal file. The following block derives
5711 ** the path to the associated database file from zPath. This block handles
5712 ** the following naming conventions:
5714 ** "<path to db>-journal"
5715 ** "<path to db>-wal"
5716 ** "<path to db>-journalNN"
5717 ** "<path to db>-walNN"
5719 ** where NN is a decimal number. The NN naming schemes are
5720 ** used by the test_multiplex.c module.
5722 nDb
= sqlite3Strlen30(zPath
) - 1;
5723 while( zPath
[nDb
]!='-' ){
5724 /* In normal operation, the journal file name will always contain
5725 ** a '-' character. However in 8+3 filename mode, or if a corrupt
5726 ** rollback journal specifies a master journal with a goofy name, then
5727 ** the '-' might be missing. */
5728 if( nDb
==0 || zPath
[nDb
]=='.' ) return SQLITE_OK
;
5731 memcpy(zDb
, zPath
, nDb
);
5734 rc
= getFileMode(zDb
, pMode
, pUid
, pGid
);
5735 }else if( flags
& SQLITE_OPEN_DELETEONCLOSE
){
5737 }else if( flags
& SQLITE_OPEN_URI
){
5738 /* If this is a main database file and the file was opened using a URI
5739 ** filename, check for the "modeof" parameter. If present, interpret
5740 ** its value as a filename and try to copy the mode, uid and gid from
5742 const char *z
= sqlite3_uri_parameter(zPath
, "modeof");
5744 rc
= getFileMode(z
, pMode
, pUid
, pGid
);
5751 ** Open the file zPath.
5753 ** Previously, the SQLite OS layer used three functions in place of this
5756 ** sqlite3OsOpenReadWrite();
5757 ** sqlite3OsOpenReadOnly();
5758 ** sqlite3OsOpenExclusive();
5760 ** These calls correspond to the following combinations of flags:
5762 ** ReadWrite() -> (READWRITE | CREATE)
5763 ** ReadOnly() -> (READONLY)
5764 ** OpenExclusive() -> (READWRITE | CREATE | EXCLUSIVE)
5766 ** The old OpenExclusive() accepted a boolean argument - "delFlag". If
5767 ** true, the file was configured to be automatically deleted when the
5768 ** file handle closed. To achieve the same effect using this new
5769 ** interface, add the DELETEONCLOSE flag to those specified above for
5772 static int unixOpen(
5773 sqlite3_vfs
*pVfs
, /* The VFS for which this is the xOpen method */
5774 const char *zPath
, /* Pathname of file to be opened */
5775 sqlite3_file
*pFile
, /* The file descriptor to be filled in */
5776 int flags
, /* Input flags to control the opening */
5777 int *pOutFlags
/* Output flags returned to SQLite core */
5779 unixFile
*p
= (unixFile
*)pFile
;
5780 int fd
= -1; /* File descriptor returned by open() */
5781 int openFlags
= 0; /* Flags to pass to open() */
5782 int eType
= flags
&0xFFFFFF00; /* Type of file to open */
5783 int noLock
; /* True to omit locking primitives */
5784 int rc
= SQLITE_OK
; /* Function Return Code */
5785 int ctrlFlags
= 0; /* UNIXFILE_* flags */
5787 int isExclusive
= (flags
& SQLITE_OPEN_EXCLUSIVE
);
5788 int isDelete
= (flags
& SQLITE_OPEN_DELETEONCLOSE
);
5789 int isCreate
= (flags
& SQLITE_OPEN_CREATE
);
5790 int isReadonly
= (flags
& SQLITE_OPEN_READONLY
);
5791 int isReadWrite
= (flags
& SQLITE_OPEN_READWRITE
);
5792 #if SQLITE_ENABLE_LOCKING_STYLE
5793 int isAutoProxy
= (flags
& SQLITE_OPEN_AUTOPROXY
);
5795 #if defined(__APPLE__) || SQLITE_ENABLE_LOCKING_STYLE
5796 struct statfs fsInfo
;
5799 /* If creating a master or main-file journal, this function will open
5800 ** a file-descriptor on the directory too. The first time unixSync()
5801 ** is called the directory file descriptor will be fsync()ed and close()d.
5803 int isNewJrnl
= (isCreate
&& (
5804 eType
==SQLITE_OPEN_MASTER_JOURNAL
5805 || eType
==SQLITE_OPEN_MAIN_JOURNAL
5806 || eType
==SQLITE_OPEN_WAL
5809 /* If argument zPath is a NULL pointer, this function is required to open
5810 ** a temporary file. Use this buffer to store the file name in.
5812 char zTmpname
[MAX_PATHNAME
+2];
5813 const char *zName
= zPath
;
5815 /* Check the following statements are true:
5817 ** (a) Exactly one of the READWRITE and READONLY flags must be set, and
5818 ** (b) if CREATE is set, then READWRITE must also be set, and
5819 ** (c) if EXCLUSIVE is set, then CREATE must also be set.
5820 ** (d) if DELETEONCLOSE is set, then CREATE must also be set.
5822 assert((isReadonly
==0 || isReadWrite
==0) && (isReadWrite
|| isReadonly
));
5823 assert(isCreate
==0 || isReadWrite
);
5824 assert(isExclusive
==0 || isCreate
);
5825 assert(isDelete
==0 || isCreate
);
5827 /* The main DB, main journal, WAL file and master journal are never
5828 ** automatically deleted. Nor are they ever temporary files. */
5829 assert( (!isDelete
&& zName
) || eType
!=SQLITE_OPEN_MAIN_DB
);
5830 assert( (!isDelete
&& zName
) || eType
!=SQLITE_OPEN_MAIN_JOURNAL
);
5831 assert( (!isDelete
&& zName
) || eType
!=SQLITE_OPEN_MASTER_JOURNAL
);
5832 assert( (!isDelete
&& zName
) || eType
!=SQLITE_OPEN_WAL
);
5834 /* Assert that the upper layer has set one of the "file-type" flags. */
5835 assert( eType
==SQLITE_OPEN_MAIN_DB
|| eType
==SQLITE_OPEN_TEMP_DB
5836 || eType
==SQLITE_OPEN_MAIN_JOURNAL
|| eType
==SQLITE_OPEN_TEMP_JOURNAL
5837 || eType
==SQLITE_OPEN_SUBJOURNAL
|| eType
==SQLITE_OPEN_MASTER_JOURNAL
5838 || eType
==SQLITE_OPEN_TRANSIENT_DB
|| eType
==SQLITE_OPEN_WAL
5841 /* Detect a pid change and reset the PRNG. There is a race condition
5842 ** here such that two or more threads all trying to open databases at
5843 ** the same instant might all reset the PRNG. But multiple resets
5846 if( randomnessPid
!=osGetpid(0) ){
5847 randomnessPid
= osGetpid(0);
5848 sqlite3_randomness(0,0);
5850 memset(p
, 0, sizeof(unixFile
));
5852 if( eType
==SQLITE_OPEN_MAIN_DB
){
5853 UnixUnusedFd
*pUnused
;
5854 pUnused
= findReusableFd(zName
, flags
);
5858 pUnused
= sqlite3_malloc64(sizeof(*pUnused
));
5860 return SQLITE_NOMEM_BKPT
;
5863 p
->pPreallocatedUnused
= pUnused
;
5865 /* Database filenames are double-zero terminated if they are not
5866 ** URIs with parameters. Hence, they can always be passed into
5867 ** sqlite3_uri_parameter(). */
5868 assert( (flags
& SQLITE_OPEN_URI
) || zName
[strlen(zName
)+1]==0 );
5871 /* If zName is NULL, the upper layer is requesting a temp file. */
5872 assert(isDelete
&& !isNewJrnl
);
5873 rc
= unixGetTempname(pVfs
->mxPathname
, zTmpname
);
5874 if( rc
!=SQLITE_OK
){
5879 /* Generated temporary filenames are always double-zero terminated
5880 ** for use by sqlite3_uri_parameter(). */
5881 assert( zName
[strlen(zName
)+1]==0 );
5884 /* Determine the value of the flags parameter passed to POSIX function
5885 ** open(). These must be calculated even if open() is not called, as
5886 ** they may be stored as part of the file handle and used by the
5887 ** 'conch file' locking functions later on. */
5888 if( isReadonly
) openFlags
|= O_RDONLY
;
5889 if( isReadWrite
) openFlags
|= O_RDWR
;
5890 if( isCreate
) openFlags
|= O_CREAT
;
5891 if( isExclusive
) openFlags
|= (O_EXCL
|O_NOFOLLOW
);
5892 openFlags
|= (O_LARGEFILE
|O_BINARY
);
5895 mode_t openMode
; /* Permissions to create file with */
5896 uid_t uid
; /* Userid for the file */
5897 gid_t gid
; /* Groupid for the file */
5898 rc
= findCreateFileMode(zName
, flags
, &openMode
, &uid
, &gid
);
5899 if( rc
!=SQLITE_OK
){
5900 assert( !p
->pPreallocatedUnused
);
5901 assert( eType
==SQLITE_OPEN_WAL
|| eType
==SQLITE_OPEN_MAIN_JOURNAL
);
5904 fd
= robust_open(zName
, openFlags
, openMode
);
5905 OSTRACE(("OPENX %-3d %s 0%o\n", fd
, zName
, openFlags
));
5906 assert( !isExclusive
|| (openFlags
& O_CREAT
)!=0 );
5908 if( isNewJrnl
&& errno
==EACCES
&& osAccess(zName
, F_OK
) ){
5909 /* If unable to create a journal because the directory is not
5910 ** writable, change the error code to indicate that. */
5911 rc
= SQLITE_READONLY_DIRECTORY
;
5912 }else if( errno
!=EISDIR
&& isReadWrite
){
5913 /* Failed to open the file for read/write access. Try read-only. */
5914 flags
&= ~(SQLITE_OPEN_READWRITE
|SQLITE_OPEN_CREATE
);
5915 openFlags
&= ~(O_RDWR
|O_CREAT
);
5916 flags
|= SQLITE_OPEN_READONLY
;
5917 openFlags
|= O_RDONLY
;
5919 fd
= robust_open(zName
, openFlags
, openMode
);
5923 int rc2
= unixLogError(SQLITE_CANTOPEN_BKPT
, "open", zName
);
5924 if( rc
==SQLITE_OK
) rc
= rc2
;
5928 /* If this process is running as root and if creating a new rollback
5929 ** journal or WAL file, set the ownership of the journal or WAL to be
5930 ** the same as the original database.
5932 if( flags
& (SQLITE_OPEN_WAL
|SQLITE_OPEN_MAIN_JOURNAL
) ){
5933 robustFchown(fd
, uid
, gid
);
5941 if( p
->pPreallocatedUnused
){
5942 p
->pPreallocatedUnused
->fd
= fd
;
5943 p
->pPreallocatedUnused
->flags
= flags
;
5949 #elif defined(SQLITE_UNLINK_AFTER_CLOSE)
5950 zPath
= sqlite3_mprintf("%s", zName
);
5952 robust_close(p
, fd
, __LINE__
);
5953 return SQLITE_NOMEM_BKPT
;
5959 #if SQLITE_ENABLE_LOCKING_STYLE
5961 p
->openFlags
= openFlags
;
5965 #if defined(__APPLE__) || SQLITE_ENABLE_LOCKING_STYLE
5966 if( fstatfs(fd
, &fsInfo
) == -1 ){
5967 storeLastErrno(p
, errno
);
5968 robust_close(p
, fd
, __LINE__
);
5969 return SQLITE_IOERR_ACCESS
;
5971 if (0 == strncmp("msdos", fsInfo
.f_fstypename
, 5)) {
5972 ((unixFile
*)pFile
)->fsFlags
|= SQLITE_FSFLAGS_IS_MSDOS
;
5974 if (0 == strncmp("exfat", fsInfo
.f_fstypename
, 5)) {
5975 ((unixFile
*)pFile
)->fsFlags
|= SQLITE_FSFLAGS_IS_MSDOS
;
5979 /* Set up appropriate ctrlFlags */
5980 if( isDelete
) ctrlFlags
|= UNIXFILE_DELETE
;
5981 if( isReadonly
) ctrlFlags
|= UNIXFILE_RDONLY
;
5982 noLock
= eType
!=SQLITE_OPEN_MAIN_DB
;
5983 if( noLock
) ctrlFlags
|= UNIXFILE_NOLOCK
;
5984 if( isNewJrnl
) ctrlFlags
|= UNIXFILE_DIRSYNC
;
5985 if( flags
& SQLITE_OPEN_URI
) ctrlFlags
|= UNIXFILE_URI
;
5987 #if SQLITE_ENABLE_LOCKING_STYLE
5988 #if SQLITE_PREFER_PROXY_LOCKING
5991 if( isAutoProxy
&& (zPath
!=NULL
) && (!noLock
) && pVfs
->xOpen
){
5992 char *envforce
= getenv("SQLITE_FORCE_PROXY_LOCKING");
5995 /* SQLITE_FORCE_PROXY_LOCKING==1 means force always use proxy, 0 means
5996 ** never use proxy, NULL means use proxy for non-local files only. */
5997 if( envforce
!=NULL
){
5998 useProxy
= atoi(envforce
)>0;
6000 useProxy
= !(fsInfo
.f_flags
&MNT_LOCAL
);
6003 rc
= fillInUnixFile(pVfs
, fd
, pFile
, zPath
, ctrlFlags
);
6004 if( rc
==SQLITE_OK
){
6005 rc
= proxyTransformUnixFile((unixFile
*)pFile
, ":auto:");
6006 if( rc
!=SQLITE_OK
){
6007 /* Use unixClose to clean up the resources added in fillInUnixFile
6008 ** and clear all the structure's references. Specifically,
6009 ** pFile->pMethods will be NULL so sqlite3OsClose will be a no-op
6020 assert( zPath
==0 || zPath
[0]=='/'
6021 || eType
==SQLITE_OPEN_MASTER_JOURNAL
|| eType
==SQLITE_OPEN_MAIN_JOURNAL
6023 rc
= fillInUnixFile(pVfs
, fd
, pFile
, zPath
, ctrlFlags
);
6026 if( rc
!=SQLITE_OK
){
6027 sqlite3_free(p
->pPreallocatedUnused
);
6034 ** Delete the file at zPath. If the dirSync argument is true, fsync()
6035 ** the directory after deleting the file.
6037 static int unixDelete(
6038 sqlite3_vfs
*NotUsed
, /* VFS containing this as the xDelete method */
6039 const char *zPath
, /* Name of file to be deleted */
6040 int dirSync
/* If true, fsync() directory after deleting file */
6043 UNUSED_PARAMETER(NotUsed
);
6044 SimulateIOError(return SQLITE_IOERR_DELETE
);
6045 if( osUnlink(zPath
)==(-1) ){
6048 || osAccess(zPath
,0)!=0
6051 rc
= SQLITE_IOERR_DELETE_NOENT
;
6053 rc
= unixLogError(SQLITE_IOERR_DELETE
, "unlink", zPath
);
6057 #ifndef SQLITE_DISABLE_DIRSYNC
6058 if( (dirSync
& 1)!=0 ){
6060 rc
= osOpenDirectory(zPath
, &fd
);
6061 if( rc
==SQLITE_OK
){
6062 if( full_fsync(fd
,0,0) ){
6063 rc
= unixLogError(SQLITE_IOERR_DIR_FSYNC
, "fsync", zPath
);
6065 robust_close(0, fd
, __LINE__
);
6067 assert( rc
==SQLITE_CANTOPEN
);
6076 ** Test the existence of or access permissions of file zPath. The
6077 ** test performed depends on the value of flags:
6079 ** SQLITE_ACCESS_EXISTS: Return 1 if the file exists
6080 ** SQLITE_ACCESS_READWRITE: Return 1 if the file is read and writable.
6081 ** SQLITE_ACCESS_READONLY: Return 1 if the file is readable.
6083 ** Otherwise return 0.
6085 static int unixAccess(
6086 sqlite3_vfs
*NotUsed
, /* The VFS containing this xAccess method */
6087 const char *zPath
, /* Path of the file to examine */
6088 int flags
, /* What do we want to learn about the zPath file? */
6089 int *pResOut
/* Write result boolean here */
6091 UNUSED_PARAMETER(NotUsed
);
6092 SimulateIOError( return SQLITE_IOERR_ACCESS
; );
6093 assert( pResOut
!=0 );
6095 /* The spec says there are three possible values for flags. But only
6096 ** two of them are actually used */
6097 assert( flags
==SQLITE_ACCESS_EXISTS
|| flags
==SQLITE_ACCESS_READWRITE
);
6099 if( flags
==SQLITE_ACCESS_EXISTS
){
6101 *pResOut
= (0==osStat(zPath
, &buf
) && buf
.st_size
>0);
6103 *pResOut
= osAccess(zPath
, W_OK
|R_OK
)==0;
6111 static int mkFullPathname(
6112 const char *zPath
, /* Input path */
6113 char *zOut
, /* Output buffer */
6114 int nOut
/* Allocated size of buffer zOut */
6116 int nPath
= sqlite3Strlen30(zPath
);
6118 if( zPath
[0]!='/' ){
6119 if( osGetcwd(zOut
, nOut
-2)==0 ){
6120 return unixLogError(SQLITE_CANTOPEN_BKPT
, "getcwd", zPath
);
6122 iOff
= sqlite3Strlen30(zOut
);
6125 if( (iOff
+nPath
+1)>nOut
){
6126 /* SQLite assumes that xFullPathname() nul-terminates the output buffer
6127 ** even if it returns an error. */
6129 return SQLITE_CANTOPEN_BKPT
;
6131 sqlite3_snprintf(nOut
-iOff
, &zOut
[iOff
], "%s", zPath
);
6136 ** Turn a relative pathname into a full pathname. The relative path
6137 ** is stored as a nul-terminated string in the buffer pointed to by
6140 ** zOut points to a buffer of at least sqlite3_vfs.mxPathname bytes
6141 ** (in this case, MAX_PATHNAME bytes). The full-path is written to
6142 ** this buffer before returning.
6144 static int unixFullPathname(
6145 sqlite3_vfs
*pVfs
, /* Pointer to vfs object */
6146 const char *zPath
, /* Possibly relative input path */
6147 int nOut
, /* Size of output buffer in bytes */
6148 char *zOut
/* Output buffer */
6150 #if !defined(HAVE_READLINK) || !defined(HAVE_LSTAT)
6151 return mkFullPathname(zPath
, zOut
, nOut
);
6155 int nLink
= 1; /* Number of symbolic links followed so far */
6156 const char *zIn
= zPath
; /* Input path for each iteration of loop */
6159 assert( pVfs
->mxPathname
==MAX_PATHNAME
);
6160 UNUSED_PARAMETER(pVfs
);
6162 /* It's odd to simulate an io-error here, but really this is just
6163 ** using the io-error infrastructure to test that SQLite handles this
6164 ** function failing. This function could fail if, for example, the
6165 ** current working directory has been unlinked.
6167 SimulateIOError( return SQLITE_ERROR
);
6171 /* Call stat() on path zIn. Set bLink to true if the path is a symbolic
6172 ** link, or false otherwise. */
6175 if( osLstat(zIn
, &buf
)!=0 ){
6176 if( errno
!=ENOENT
){
6177 rc
= unixLogError(SQLITE_CANTOPEN_BKPT
, "lstat", zIn
);
6180 bLink
= S_ISLNK(buf
.st_mode
);
6185 zDel
= sqlite3_malloc(nOut
);
6186 if( zDel
==0 ) rc
= SQLITE_NOMEM_BKPT
;
6187 }else if( ++nLink
>SQLITE_MAX_SYMLINKS
){
6188 rc
= SQLITE_CANTOPEN_BKPT
;
6191 if( rc
==SQLITE_OK
){
6192 nByte
= osReadlink(zIn
, zDel
, nOut
-1);
6194 rc
= unixLogError(SQLITE_CANTOPEN_BKPT
, "readlink", zIn
);
6198 for(n
= sqlite3Strlen30(zIn
); n
>0 && zIn
[n
-1]!='/'; n
--);
6199 if( nByte
+n
+1>nOut
){
6200 rc
= SQLITE_CANTOPEN_BKPT
;
6202 memmove(&zDel
[n
], zDel
, nByte
+1);
6203 memcpy(zDel
, zIn
, n
);
6214 assert( rc
!=SQLITE_OK
|| zIn
!=zOut
|| zIn
[0]=='/' );
6215 if( rc
==SQLITE_OK
&& zIn
!=zOut
){
6216 rc
= mkFullPathname(zIn
, zOut
, nOut
);
6218 if( bLink
==0 ) break;
6220 }while( rc
==SQLITE_OK
);
6224 #endif /* HAVE_READLINK && HAVE_LSTAT */
6228 #ifndef SQLITE_OMIT_LOAD_EXTENSION
6230 ** Interfaces for opening a shared library, finding entry points
6231 ** within the shared library, and closing the shared library.
6234 static void *unixDlOpen(sqlite3_vfs
*NotUsed
, const char *zFilename
){
6235 UNUSED_PARAMETER(NotUsed
);
6236 return dlopen(zFilename
, RTLD_NOW
| RTLD_GLOBAL
);
6240 ** SQLite calls this function immediately after a call to unixDlSym() or
6241 ** unixDlOpen() fails (returns a null pointer). If a more detailed error
6242 ** message is available, it is written to zBufOut. If no error message
6243 ** is available, zBufOut is left unmodified and SQLite uses a default
6246 static void unixDlError(sqlite3_vfs
*NotUsed
, int nBuf
, char *zBufOut
){
6248 UNUSED_PARAMETER(NotUsed
);
6252 sqlite3_snprintf(nBuf
, zBufOut
, "%s", zErr
);
6256 static void (*unixDlSym(sqlite3_vfs
*NotUsed
, void *p
, const char*zSym
))(void){
6258 ** GCC with -pedantic-errors says that C90 does not allow a void* to be
6259 ** cast into a pointer to a function. And yet the library dlsym() routine
6260 ** returns a void* which is really a pointer to a function. So how do we
6261 ** use dlsym() with -pedantic-errors?
6263 ** Variable x below is defined to be a pointer to a function taking
6264 ** parameters void* and const char* and returning a pointer to a function.
6265 ** We initialize x by assigning it a pointer to the dlsym() function.
6266 ** (That assignment requires a cast.) Then we call the function that
6269 ** This work-around is unlikely to work correctly on any system where
6270 ** you really cannot cast a function pointer into void*. But then, on the
6271 ** other hand, dlsym() will not work on such a system either, so we have
6272 ** not really lost anything.
6274 void (*(*x
)(void*,const char*))(void);
6275 UNUSED_PARAMETER(NotUsed
);
6276 x
= (void(*(*)(void*,const char*))(void))dlsym
;
6277 return (*x
)(p
, zSym
);
6279 static void unixDlClose(sqlite3_vfs
*NotUsed
, void *pHandle
){
6280 UNUSED_PARAMETER(NotUsed
);
6283 #else /* if SQLITE_OMIT_LOAD_EXTENSION is defined: */
6284 #define unixDlOpen 0
6285 #define unixDlError 0
6287 #define unixDlClose 0
6291 ** Write nBuf bytes of random data to the supplied buffer zBuf.
6293 static int unixRandomness(sqlite3_vfs
*NotUsed
, int nBuf
, char *zBuf
){
6294 UNUSED_PARAMETER(NotUsed
);
6295 assert((size_t)nBuf
>=(sizeof(time_t)+sizeof(int)));
6297 /* We have to initialize zBuf to prevent valgrind from reporting
6298 ** errors. The reports issued by valgrind are incorrect - we would
6299 ** prefer that the randomness be increased by making use of the
6300 ** uninitialized space in zBuf - but valgrind errors tend to worry
6301 ** some users. Rather than argue, it seems easier just to initialize
6302 ** the whole array and silence valgrind, even if that means less randomness
6303 ** in the random seed.
6305 ** When testing, initializing zBuf[] to zero is all we do. That means
6306 ** that we always use the same random number sequence. This makes the
6307 ** tests repeatable.
6309 memset(zBuf
, 0, nBuf
);
6310 randomnessPid
= osGetpid(0);
6311 #if !defined(SQLITE_TEST) && !defined(SQLITE_OMIT_RANDOMNESS)
6314 fd
= robust_open("/dev/urandom", O_RDONLY
, 0);
6318 memcpy(zBuf
, &t
, sizeof(t
));
6319 memcpy(&zBuf
[sizeof(t
)], &randomnessPid
, sizeof(randomnessPid
));
6320 assert( sizeof(t
)+sizeof(randomnessPid
)<=(size_t)nBuf
);
6321 nBuf
= sizeof(t
) + sizeof(randomnessPid
);
6323 do{ got
= osRead(fd
, zBuf
, nBuf
); }while( got
<0 && errno
==EINTR
);
6324 robust_close(0, fd
, __LINE__
);
6333 ** Sleep for a little while. Return the amount of time slept.
6334 ** The argument is the number of microseconds we want to sleep.
6335 ** The return value is the number of microseconds of sleep actually
6336 ** requested from the underlying operating system, a number which
6337 ** might be greater than or equal to the argument, but not less
6338 ** than the argument.
6340 static int unixSleep(sqlite3_vfs
*NotUsed
, int microseconds
){
6344 sp
.tv_sec
= microseconds
/ 1000000;
6345 sp
.tv_nsec
= (microseconds
% 1000000) * 1000;
6346 nanosleep(&sp
, NULL
);
6347 UNUSED_PARAMETER(NotUsed
);
6348 return microseconds
;
6349 #elif defined(HAVE_USLEEP) && HAVE_USLEEP
6350 usleep(microseconds
);
6351 UNUSED_PARAMETER(NotUsed
);
6352 return microseconds
;
6354 int seconds
= (microseconds
+999999)/1000000;
6356 UNUSED_PARAMETER(NotUsed
);
6357 return seconds
*1000000;
6362 ** The following variable, if set to a non-zero value, is interpreted as
6363 ** the number of seconds since 1970 and is used to set the result of
6364 ** sqlite3OsCurrentTime() during testing.
6367 int sqlite3_current_time
= 0; /* Fake system time in seconds since 1970. */
6371 ** Find the current time (in Universal Coordinated Time). Write into *piNow
6372 ** the current time and date as a Julian Day number times 86_400_000. In
6373 ** other words, write into *piNow the number of milliseconds since the Julian
6374 ** epoch of noon in Greenwich on November 24, 4714 B.C according to the
6375 ** proleptic Gregorian calendar.
6377 ** On success, return SQLITE_OK. Return SQLITE_ERROR if the time and date
6380 static int unixCurrentTimeInt64(sqlite3_vfs
*NotUsed
, sqlite3_int64
*piNow
){
6381 static const sqlite3_int64 unixEpoch
= 24405875*(sqlite3_int64
)8640000;
6383 #if defined(NO_GETTOD)
6386 *piNow
= ((sqlite3_int64
)t
)*1000 + unixEpoch
;
6388 struct timespec sNow
;
6389 clock_gettime(CLOCK_REALTIME
, &sNow
);
6390 *piNow
= unixEpoch
+ 1000*(sqlite3_int64
)sNow
.tv_sec
+ sNow
.tv_nsec
/1000000;
6392 struct timeval sNow
;
6393 (void)gettimeofday(&sNow
, 0); /* Cannot fail given valid arguments */
6394 *piNow
= unixEpoch
+ 1000*(sqlite3_int64
)sNow
.tv_sec
+ sNow
.tv_usec
/1000;
6398 if( sqlite3_current_time
){
6399 *piNow
= 1000*(sqlite3_int64
)sqlite3_current_time
+ unixEpoch
;
6402 UNUSED_PARAMETER(NotUsed
);
6406 #ifndef SQLITE_OMIT_DEPRECATED
6408 ** Find the current time (in Universal Coordinated Time). Write the
6409 ** current time and date as a Julian Day number into *prNow and
6410 ** return 0. Return 1 if the time and date cannot be found.
6412 static int unixCurrentTime(sqlite3_vfs
*NotUsed
, double *prNow
){
6413 sqlite3_int64 i
= 0;
6415 UNUSED_PARAMETER(NotUsed
);
6416 rc
= unixCurrentTimeInt64(0, &i
);
6417 *prNow
= i
/86400000.0;
6421 # define unixCurrentTime 0
6425 ** The xGetLastError() method is designed to return a better
6426 ** low-level error message when operating-system problems come up
6427 ** during SQLite operation. Only the integer return code is currently
6430 static int unixGetLastError(sqlite3_vfs
*NotUsed
, int NotUsed2
, char *NotUsed3
){
6431 UNUSED_PARAMETER(NotUsed
);
6432 UNUSED_PARAMETER(NotUsed2
);
6433 UNUSED_PARAMETER(NotUsed3
);
6439 ************************ End of sqlite3_vfs methods ***************************
6440 ******************************************************************************/
6442 /******************************************************************************
6443 ************************** Begin Proxy Locking ********************************
6445 ** Proxy locking is a "uber-locking-method" in this sense: It uses the
6446 ** other locking methods on secondary lock files. Proxy locking is a
6447 ** meta-layer over top of the primitive locking implemented above. For
6448 ** this reason, the division that implements of proxy locking is deferred
6449 ** until late in the file (here) after all of the other I/O methods have
6450 ** been defined - so that the primitive locking methods are available
6451 ** as services to help with the implementation of proxy locking.
6455 ** The default locking schemes in SQLite use byte-range locks on the
6456 ** database file to coordinate safe, concurrent access by multiple readers
6457 ** and writers [http://sqlite.org/lockingv3.html]. The five file locking
6458 ** states (UNLOCKED, PENDING, SHARED, RESERVED, EXCLUSIVE) are implemented
6459 ** as POSIX read & write locks over fixed set of locations (via fsctl),
6460 ** on AFP and SMB only exclusive byte-range locks are available via fsctl
6461 ** with _IOWR('z', 23, struct ByteRangeLockPB2) to track the same 5 states.
6462 ** To simulate a F_RDLCK on the shared range, on AFP a randomly selected
6463 ** address in the shared range is taken for a SHARED lock, the entire
6464 ** shared range is taken for an EXCLUSIVE lock):
6466 ** PENDING_BYTE 0x40000000
6467 ** RESERVED_BYTE 0x40000001
6468 ** SHARED_RANGE 0x40000002 -> 0x40000200
6470 ** This works well on the local file system, but shows a nearly 100x
6471 ** slowdown in read performance on AFP because the AFP client disables
6472 ** the read cache when byte-range locks are present. Enabling the read
6473 ** cache exposes a cache coherency problem that is present on all OS X
6474 ** supported network file systems. NFS and AFP both observe the
6475 ** close-to-open semantics for ensuring cache coherency
6476 ** [http://nfs.sourceforge.net/#faq_a8], which does not effectively
6477 ** address the requirements for concurrent database access by multiple
6478 ** readers and writers
6479 ** [http://www.nabble.com/SQLite-on-NFS-cache-coherency-td15655701.html].
6481 ** To address the performance and cache coherency issues, proxy file locking
6482 ** changes the way database access is controlled by limiting access to a
6483 ** single host at a time and moving file locks off of the database file
6484 ** and onto a proxy file on the local file system.
6487 ** Using proxy locks
6488 ** -----------------
6492 ** sqlite3_file_control(db, dbname, SQLITE_FCNTL_SET_LOCKPROXYFILE,
6493 ** <proxy_path> | ":auto:");
6494 ** sqlite3_file_control(db, dbname, SQLITE_FCNTL_GET_LOCKPROXYFILE,
6500 ** PRAGMA [database.]lock_proxy_file=<proxy_path> | :auto:
6501 ** PRAGMA [database.]lock_proxy_file
6503 ** Specifying ":auto:" means that if there is a conch file with a matching
6504 ** host ID in it, the proxy path in the conch file will be used, otherwise
6505 ** a proxy path based on the user's temp dir
6506 ** (via confstr(_CS_DARWIN_USER_TEMP_DIR,...)) will be used and the
6507 ** actual proxy file name is generated from the name and path of the
6508 ** database file. For example:
6510 ** For database path "/Users/me/foo.db"
6511 ** The lock path will be "<tmpdir>/sqliteplocks/_Users_me_foo.db:auto:")
6513 ** Once a lock proxy is configured for a database connection, it can not
6514 ** be removed, however it may be switched to a different proxy path via
6515 ** the above APIs (assuming the conch file is not being held by another
6516 ** connection or process).
6519 ** How proxy locking works
6520 ** -----------------------
6522 ** Proxy file locking relies primarily on two new supporting files:
6524 ** * conch file to limit access to the database file to a single host
6527 ** * proxy file to act as a proxy for the advisory locks normally
6528 ** taken on the database
6530 ** The conch file - to use a proxy file, sqlite must first "hold the conch"
6531 ** by taking an sqlite-style shared lock on the conch file, reading the
6532 ** contents and comparing the host's unique host ID (see below) and lock
6533 ** proxy path against the values stored in the conch. The conch file is
6534 ** stored in the same directory as the database file and the file name
6535 ** is patterned after the database file name as ".<databasename>-conch".
6536 ** If the conch file does not exist, or its contents do not match the
6537 ** host ID and/or proxy path, then the lock is escalated to an exclusive
6538 ** lock and the conch file contents is updated with the host ID and proxy
6539 ** path and the lock is downgraded to a shared lock again. If the conch
6540 ** is held by another process (with a shared lock), the exclusive lock
6541 ** will fail and SQLITE_BUSY is returned.
6543 ** The proxy file - a single-byte file used for all advisory file locks
6544 ** normally taken on the database file. This allows for safe sharing
6545 ** of the database file for multiple readers and writers on the same
6546 ** host (the conch ensures that they all use the same local lock file).
6548 ** Requesting the lock proxy does not immediately take the conch, it is
6549 ** only taken when the first request to lock database file is made.
6550 ** This matches the semantics of the traditional locking behavior, where
6551 ** opening a connection to a database file does not take a lock on it.
6552 ** The shared lock and an open file descriptor are maintained until
6553 ** the connection to the database is closed.
6555 ** The proxy file and the lock file are never deleted so they only need
6556 ** to be created the first time they are used.
6558 ** Configuration options
6559 ** ---------------------
6561 ** SQLITE_PREFER_PROXY_LOCKING
6563 ** Database files accessed on non-local file systems are
6564 ** automatically configured for proxy locking, lock files are
6565 ** named automatically using the same logic as
6566 ** PRAGMA lock_proxy_file=":auto:"
6568 ** SQLITE_PROXY_DEBUG
6570 ** Enables the logging of error messages during host id file
6571 ** retrieval and creation
6575 ** Overrides the default directory used for lock proxy files that
6576 ** are named automatically via the ":auto:" setting
6578 ** SQLITE_DEFAULT_PROXYDIR_PERMISSIONS
6580 ** Permissions to use when creating a directory for storing the
6581 ** lock proxy files, only used when LOCKPROXYDIR is not set.
6584 ** As mentioned above, when compiled with SQLITE_PREFER_PROXY_LOCKING,
6585 ** setting the environment variable SQLITE_FORCE_PROXY_LOCKING to 1 will
6586 ** force proxy locking to be used for every database file opened, and 0
6587 ** will force automatic proxy locking to be disabled for all database
6588 ** files (explicitly calling the SQLITE_FCNTL_SET_LOCKPROXYFILE pragma or
6589 ** sqlite_file_control API is not affected by SQLITE_FORCE_PROXY_LOCKING).
6593 ** Proxy locking is only available on MacOSX
6595 #if defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE
6598 ** The proxyLockingContext has the path and file structures for the remote
6599 ** and local proxy files in it
6601 typedef struct proxyLockingContext proxyLockingContext
;
6602 struct proxyLockingContext
{
6603 unixFile
*conchFile
; /* Open conch file */
6604 char *conchFilePath
; /* Name of the conch file */
6605 unixFile
*lockProxy
; /* Open proxy lock file */
6606 char *lockProxyPath
; /* Name of the proxy lock file */
6607 char *dbPath
; /* Name of the open file */
6608 int conchHeld
; /* 1 if the conch is held, -1 if lockless */
6609 int nFails
; /* Number of conch taking failures */
6610 void *oldLockingContext
; /* Original lockingcontext to restore on close */
6611 sqlite3_io_methods
const *pOldMethod
; /* Original I/O methods for close */
6615 ** The proxy lock file path for the database at dbPath is written into lPath,
6616 ** which must point to valid, writable memory large enough for a maxLen length
6619 static int proxyGetLockPath(const char *dbPath
, char *lPath
, size_t maxLen
){
6625 len
= strlcpy(lPath
, LOCKPROXYDIR
, maxLen
);
6627 # ifdef _CS_DARWIN_USER_TEMP_DIR
6629 if( !confstr(_CS_DARWIN_USER_TEMP_DIR
, lPath
, maxLen
) ){
6630 OSTRACE(("GETLOCKPATH failed %s errno=%d pid=%d\n",
6631 lPath
, errno
, osGetpid(0)));
6632 return SQLITE_IOERR_LOCK
;
6634 len
= strlcat(lPath
, "sqliteplocks", maxLen
);
6637 len
= strlcpy(lPath
, "/tmp/", maxLen
);
6641 if( lPath
[len
-1]!='/' ){
6642 len
= strlcat(lPath
, "/", maxLen
);
6645 /* transform the db path to a unique cache name */
6646 dbLen
= (int)strlen(dbPath
);
6647 for( i
=0; i
<dbLen
&& (i
+len
+7)<(int)maxLen
; i
++){
6649 lPath
[i
+len
] = (c
=='/')?'_':c
;
6652 strlcat(lPath
, ":auto:", maxLen
);
6653 OSTRACE(("GETLOCKPATH proxy lock path=%s pid=%d\n", lPath
, osGetpid(0)));
6658 ** Creates the lock file and any missing directories in lockPath
6660 static int proxyCreateLockPath(const char *lockPath
){
6662 char buf
[MAXPATHLEN
];
6665 assert(lockPath
!=NULL
);
6666 /* try to create all the intermediate directories */
6667 len
= (int)strlen(lockPath
);
6668 buf
[0] = lockPath
[0];
6669 for( i
=1; i
<len
; i
++ ){
6670 if( lockPath
[i
] == '/' && (i
- start
> 0) ){
6671 /* only mkdir if leaf dir != "." or "/" or ".." */
6672 if( i
-start
>2 || (i
-start
==1 && buf
[start
] != '.' && buf
[start
] != '/')
6673 || (i
-start
==2 && buf
[start
] != '.' && buf
[start
+1] != '.') ){
6675 if( osMkdir(buf
, SQLITE_DEFAULT_PROXYDIR_PERMISSIONS
) ){
6678 OSTRACE(("CREATELOCKPATH FAILED creating %s, "
6679 "'%s' proxy lock path=%s pid=%d\n",
6680 buf
, strerror(err
), lockPath
, osGetpid(0)));
6687 buf
[i
] = lockPath
[i
];
6689 OSTRACE(("CREATELOCKPATH proxy lock path=%s pid=%d\n",lockPath
,osGetpid(0)));
6694 ** Create a new VFS file descriptor (stored in memory obtained from
6695 ** sqlite3_malloc) and open the file named "path" in the file descriptor.
6697 ** The caller is responsible not only for closing the file descriptor
6698 ** but also for freeing the memory associated with the file descriptor.
6700 static int proxyCreateUnixFile(
6701 const char *path
, /* path for the new unixFile */
6702 unixFile
**ppFile
, /* unixFile created and returned by ref */
6703 int islockfile
/* if non zero missing dirs will be created */
6708 int openFlags
= O_RDWR
| O_CREAT
;
6709 sqlite3_vfs dummyVfs
;
6711 UnixUnusedFd
*pUnused
= NULL
;
6713 /* 1. first try to open/create the file
6714 ** 2. if that fails, and this is a lock file (not-conch), try creating
6715 ** the parent directories and then try again.
6716 ** 3. if that fails, try to open the file read-only
6717 ** otherwise return BUSY (if lock file) or CANTOPEN for the conch file
6719 pUnused
= findReusableFd(path
, openFlags
);
6723 pUnused
= sqlite3_malloc64(sizeof(*pUnused
));
6725 return SQLITE_NOMEM_BKPT
;
6729 fd
= robust_open(path
, openFlags
, 0);
6731 if( fd
<0 && errno
==ENOENT
&& islockfile
){
6732 if( proxyCreateLockPath(path
) == SQLITE_OK
){
6733 fd
= robust_open(path
, openFlags
, 0);
6738 openFlags
= O_RDONLY
;
6739 fd
= robust_open(path
, openFlags
, 0);
6750 return SQLITE_IOERR_LOCK
; /* even though it is the conch */
6752 return SQLITE_CANTOPEN_BKPT
;
6756 pNew
= (unixFile
*)sqlite3_malloc64(sizeof(*pNew
));
6758 rc
= SQLITE_NOMEM_BKPT
;
6759 goto end_create_proxy
;
6761 memset(pNew
, 0, sizeof(unixFile
));
6762 pNew
->openFlags
= openFlags
;
6763 memset(&dummyVfs
, 0, sizeof(dummyVfs
));
6764 dummyVfs
.pAppData
= (void*)&autolockIoFinder
;
6765 dummyVfs
.zName
= "dummy";
6767 pUnused
->flags
= openFlags
;
6768 pNew
->pPreallocatedUnused
= pUnused
;
6770 rc
= fillInUnixFile(&dummyVfs
, fd
, (sqlite3_file
*)pNew
, path
, 0);
6771 if( rc
==SQLITE_OK
){
6776 robust_close(pNew
, fd
, __LINE__
);
6778 sqlite3_free(pUnused
);
6783 /* simulate multiple hosts by creating unique hostid file paths */
6784 int sqlite3_hostid_num
= 0;
6787 #define PROXY_HOSTIDLEN 16 /* conch file host id length */
6789 #ifdef HAVE_GETHOSTUUID
6790 /* Not always defined in the headers as it ought to be */
6791 extern int gethostuuid(uuid_t id
, const struct timespec
*wait
);
6794 /* get the host ID via gethostuuid(), pHostID must point to PROXY_HOSTIDLEN
6795 ** bytes of writable memory.
6797 static int proxyGetHostID(unsigned char *pHostID
, int *pError
){
6798 assert(PROXY_HOSTIDLEN
== sizeof(uuid_t
));
6799 memset(pHostID
, 0, PROXY_HOSTIDLEN
);
6800 #ifdef HAVE_GETHOSTUUID
6802 struct timespec timeout
= {1, 0}; /* 1 sec timeout */
6803 if( gethostuuid(pHostID
, &timeout
) ){
6808 return SQLITE_IOERR
;
6812 UNUSED_PARAMETER(pError
);
6815 /* simulate multiple hosts by creating unique hostid file paths */
6816 if( sqlite3_hostid_num
!= 0){
6817 pHostID
[0] = (char)(pHostID
[0] + (char)(sqlite3_hostid_num
& 0xFF));
6824 /* The conch file contains the header, host id and lock file path
6826 #define PROXY_CONCHVERSION 2 /* 1-byte header, 16-byte host id, path */
6827 #define PROXY_HEADERLEN 1 /* conch file header length */
6828 #define PROXY_PATHINDEX (PROXY_HEADERLEN+PROXY_HOSTIDLEN)
6829 #define PROXY_MAXCONCHLEN (PROXY_HEADERLEN+PROXY_HOSTIDLEN+MAXPATHLEN)
6832 ** Takes an open conch file, copies the contents to a new path and then moves
6833 ** it back. The newly created file's file descriptor is assigned to the
6834 ** conch file structure and finally the original conch file descriptor is
6835 ** closed. Returns zero if successful.
6837 static int proxyBreakConchLock(unixFile
*pFile
, uuid_t myHostID
){
6838 proxyLockingContext
*pCtx
= (proxyLockingContext
*)pFile
->lockingContext
;
6839 unixFile
*conchFile
= pCtx
->conchFile
;
6840 char tPath
[MAXPATHLEN
];
6841 char buf
[PROXY_MAXCONCHLEN
];
6842 char *cPath
= pCtx
->conchFilePath
;
6845 char errmsg
[64] = "";
6848 UNUSED_PARAMETER(myHostID
);
6850 /* create a new path by replace the trailing '-conch' with '-break' */
6851 pathLen
= strlcpy(tPath
, cPath
, MAXPATHLEN
);
6852 if( pathLen
>MAXPATHLEN
|| pathLen
<6 ||
6853 (strlcpy(&tPath
[pathLen
-5], "break", 6) != 5) ){
6854 sqlite3_snprintf(sizeof(errmsg
),errmsg
,"path error (len %d)",(int)pathLen
);
6857 /* read the conch content */
6858 readLen
= osPread(conchFile
->h
, buf
, PROXY_MAXCONCHLEN
, 0);
6859 if( readLen
<PROXY_PATHINDEX
){
6860 sqlite3_snprintf(sizeof(errmsg
),errmsg
,"read error (len %d)",(int)readLen
);
6863 /* write it out to the temporary break file */
6864 fd
= robust_open(tPath
, (O_RDWR
|O_CREAT
|O_EXCL
), 0);
6866 sqlite3_snprintf(sizeof(errmsg
), errmsg
, "create failed (%d)", errno
);
6869 if( osPwrite(fd
, buf
, readLen
, 0) != (ssize_t
)readLen
){
6870 sqlite3_snprintf(sizeof(errmsg
), errmsg
, "write failed (%d)", errno
);
6873 if( rename(tPath
, cPath
) ){
6874 sqlite3_snprintf(sizeof(errmsg
), errmsg
, "rename failed (%d)", errno
);
6878 fprintf(stderr
, "broke stale lock on %s\n", cPath
);
6879 robust_close(pFile
, conchFile
->h
, __LINE__
);
6881 conchFile
->openFlags
= O_RDWR
| O_CREAT
;
6887 robust_close(pFile
, fd
, __LINE__
);
6889 fprintf(stderr
, "failed to break stale lock on %s, %s\n", cPath
, errmsg
);
6894 /* Take the requested lock on the conch file and break a stale lock if the
6897 static int proxyConchLock(unixFile
*pFile
, uuid_t myHostID
, int lockType
){
6898 proxyLockingContext
*pCtx
= (proxyLockingContext
*)pFile
->lockingContext
;
6899 unixFile
*conchFile
= pCtx
->conchFile
;
6902 struct timespec conchModTime
;
6904 memset(&conchModTime
, 0, sizeof(conchModTime
));
6906 rc
= conchFile
->pMethod
->xLock((sqlite3_file
*)conchFile
, lockType
);
6908 if( rc
==SQLITE_BUSY
){
6909 /* If the lock failed (busy):
6910 * 1st try: get the mod time of the conch, wait 0.5s and try again.
6911 * 2nd try: fail if the mod time changed or host id is different, wait
6912 * 10 sec and try again
6913 * 3rd try: break the lock unless the mod time has changed.
6916 if( osFstat(conchFile
->h
, &buf
) ){
6917 storeLastErrno(pFile
, errno
);
6918 return SQLITE_IOERR_LOCK
;
6922 conchModTime
= buf
.st_mtimespec
;
6923 usleep(500000); /* wait 0.5 sec and try the lock again*/
6928 if( conchModTime
.tv_sec
!= buf
.st_mtimespec
.tv_sec
||
6929 conchModTime
.tv_nsec
!= buf
.st_mtimespec
.tv_nsec
){
6934 char tBuf
[PROXY_MAXCONCHLEN
];
6935 int len
= osPread(conchFile
->h
, tBuf
, PROXY_MAXCONCHLEN
, 0);
6937 storeLastErrno(pFile
, errno
);
6938 return SQLITE_IOERR_LOCK
;
6940 if( len
>PROXY_PATHINDEX
&& tBuf
[0]==(char)PROXY_CONCHVERSION
){
6941 /* don't break the lock if the host id doesn't match */
6942 if( 0!=memcmp(&tBuf
[PROXY_HEADERLEN
], myHostID
, PROXY_HOSTIDLEN
) ){
6946 /* don't break the lock on short read or a version mismatch */
6949 usleep(10000000); /* wait 10 sec and try the lock again */
6953 assert( nTries
==3 );
6954 if( 0==proxyBreakConchLock(pFile
, myHostID
) ){
6956 if( lockType
==EXCLUSIVE_LOCK
){
6957 rc
= conchFile
->pMethod
->xLock((sqlite3_file
*)conchFile
, SHARED_LOCK
);
6960 rc
= conchFile
->pMethod
->xLock((sqlite3_file
*)conchFile
, lockType
);
6964 } while( rc
==SQLITE_BUSY
&& nTries
<3 );
6969 /* Takes the conch by taking a shared lock and read the contents conch, if
6970 ** lockPath is non-NULL, the host ID and lock file path must match. A NULL
6971 ** lockPath means that the lockPath in the conch file will be used if the
6972 ** host IDs match, or a new lock path will be generated automatically
6973 ** and written to the conch file.
6975 static int proxyTakeConch(unixFile
*pFile
){
6976 proxyLockingContext
*pCtx
= (proxyLockingContext
*)pFile
->lockingContext
;
6978 if( pCtx
->conchHeld
!=0 ){
6981 unixFile
*conchFile
= pCtx
->conchFile
;
6984 char readBuf
[PROXY_MAXCONCHLEN
];
6985 char lockPath
[MAXPATHLEN
];
6986 char *tempLockPath
= NULL
;
6988 int createConch
= 0;
6989 int hostIdMatch
= 0;
6991 int tryOldLockPath
= 0;
6992 int forceNewLockPath
= 0;
6994 OSTRACE(("TAKECONCH %d for %s pid=%d\n", conchFile
->h
,
6995 (pCtx
->lockProxyPath
? pCtx
->lockProxyPath
: ":auto:"),
6998 rc
= proxyGetHostID(myHostID
, &pError
);
6999 if( (rc
&0xff)==SQLITE_IOERR
){
7000 storeLastErrno(pFile
, pError
);
7003 rc
= proxyConchLock(pFile
, myHostID
, SHARED_LOCK
);
7004 if( rc
!=SQLITE_OK
){
7007 /* read the existing conch file */
7008 readLen
= seekAndRead((unixFile
*)conchFile
, 0, readBuf
, PROXY_MAXCONCHLEN
);
7010 /* I/O error: lastErrno set by seekAndRead */
7011 storeLastErrno(pFile
, conchFile
->lastErrno
);
7012 rc
= SQLITE_IOERR_READ
;
7014 }else if( readLen
<=(PROXY_HEADERLEN
+PROXY_HOSTIDLEN
) ||
7015 readBuf
[0]!=(char)PROXY_CONCHVERSION
){
7016 /* a short read or version format mismatch means we need to create a new
7021 /* if the host id matches and the lock path already exists in the conch
7022 ** we'll try to use the path there, if we can't open that path, we'll
7023 ** retry with a new auto-generated path
7025 do { /* in case we need to try again for an :auto: named lock file */
7027 if( !createConch
&& !forceNewLockPath
){
7028 hostIdMatch
= !memcmp(&readBuf
[PROXY_HEADERLEN
], myHostID
,
7030 /* if the conch has data compare the contents */
7031 if( !pCtx
->lockProxyPath
){
7032 /* for auto-named local lock file, just check the host ID and we'll
7033 ** use the local lock file path that's already in there
7036 size_t pathLen
= (readLen
- PROXY_PATHINDEX
);
7038 if( pathLen
>=MAXPATHLEN
){
7039 pathLen
=MAXPATHLEN
-1;
7041 memcpy(lockPath
, &readBuf
[PROXY_PATHINDEX
], pathLen
);
7042 lockPath
[pathLen
] = 0;
7043 tempLockPath
= lockPath
;
7045 /* create a copy of the lock path if the conch is taken */
7048 }else if( hostIdMatch
7049 && !strncmp(pCtx
->lockProxyPath
, &readBuf
[PROXY_PATHINDEX
],
7050 readLen
-PROXY_PATHINDEX
)
7052 /* conch host and lock path match */
7057 /* if the conch isn't writable and doesn't match, we can't take it */
7058 if( (conchFile
->openFlags
&O_RDWR
) == 0 ){
7063 /* either the conch didn't match or we need to create a new one */
7064 if( !pCtx
->lockProxyPath
){
7065 proxyGetLockPath(pCtx
->dbPath
, lockPath
, MAXPATHLEN
);
7066 tempLockPath
= lockPath
;
7067 /* create a copy of the lock path _only_ if the conch is taken */
7070 /* update conch with host and path (this will fail if other process
7071 ** has a shared lock already), if the host id matches, use the big
7074 futimes(conchFile
->h
, NULL
);
7075 if( hostIdMatch
&& !createConch
){
7076 if( conchFile
->pInode
&& conchFile
->pInode
->nShared
>1 ){
7077 /* We are trying for an exclusive lock but another thread in this
7078 ** same process is still holding a shared lock. */
7081 rc
= proxyConchLock(pFile
, myHostID
, EXCLUSIVE_LOCK
);
7084 rc
= proxyConchLock(pFile
, myHostID
, EXCLUSIVE_LOCK
);
7086 if( rc
==SQLITE_OK
){
7087 char writeBuffer
[PROXY_MAXCONCHLEN
];
7090 writeBuffer
[0] = (char)PROXY_CONCHVERSION
;
7091 memcpy(&writeBuffer
[PROXY_HEADERLEN
], myHostID
, PROXY_HOSTIDLEN
);
7092 if( pCtx
->lockProxyPath
!=NULL
){
7093 strlcpy(&writeBuffer
[PROXY_PATHINDEX
], pCtx
->lockProxyPath
,
7096 strlcpy(&writeBuffer
[PROXY_PATHINDEX
], tempLockPath
, MAXPATHLEN
);
7098 writeSize
= PROXY_PATHINDEX
+ strlen(&writeBuffer
[PROXY_PATHINDEX
]);
7099 robust_ftruncate(conchFile
->h
, writeSize
);
7100 rc
= unixWrite((sqlite3_file
*)conchFile
, writeBuffer
, writeSize
, 0);
7101 full_fsync(conchFile
->h
,0,0);
7102 /* If we created a new conch file (not just updated the contents of a
7103 ** valid conch file), try to match the permissions of the database
7105 if( rc
==SQLITE_OK
&& createConch
){
7107 int err
= osFstat(pFile
->h
, &buf
);
7109 mode_t cmode
= buf
.st_mode
&(S_IRUSR
|S_IWUSR
| S_IRGRP
|S_IWGRP
|
7111 /* try to match the database file R/W permissions, ignore failure */
7112 #ifndef SQLITE_PROXY_DEBUG
7113 osFchmod(conchFile
->h
, cmode
);
7116 rc
= osFchmod(conchFile
->h
, cmode
);
7117 }while( rc
==(-1) && errno
==EINTR
);
7120 fprintf(stderr
, "fchmod %o FAILED with %d %s\n",
7121 cmode
, code
, strerror(code
));
7123 fprintf(stderr
, "fchmod %o SUCCEDED\n",cmode
);
7127 fprintf(stderr
, "STAT FAILED[%d] with %d %s\n",
7128 err
, code
, strerror(code
));
7133 conchFile
->pMethod
->xUnlock((sqlite3_file
*)conchFile
, SHARED_LOCK
);
7136 OSTRACE(("TRANSPROXY: CLOSE %d\n", pFile
->h
));
7137 if( rc
==SQLITE_OK
&& pFile
->openFlags
){
7140 robust_close(pFile
, pFile
->h
, __LINE__
);
7143 fd
= robust_open(pCtx
->dbPath
, pFile
->openFlags
, 0);
7144 OSTRACE(("TRANSPROXY: OPEN %d\n", fd
));
7148 rc
=SQLITE_CANTOPEN_BKPT
; /* SQLITE_BUSY? proxyTakeConch called
7152 if( rc
==SQLITE_OK
&& !pCtx
->lockProxy
){
7153 char *path
= tempLockPath
? tempLockPath
: pCtx
->lockProxyPath
;
7154 rc
= proxyCreateUnixFile(path
, &pCtx
->lockProxy
, 1);
7155 if( rc
!=SQLITE_OK
&& rc
!=SQLITE_NOMEM
&& tryOldLockPath
){
7156 /* we couldn't create the proxy lock file with the old lock file path
7157 ** so try again via auto-naming
7159 forceNewLockPath
= 1;
7161 continue; /* go back to the do {} while start point, try again */
7164 if( rc
==SQLITE_OK
){
7165 /* Need to make a copy of path if we extracted the value
7166 ** from the conch file or the path was allocated on the stack
7169 pCtx
->lockProxyPath
= sqlite3DbStrDup(0, tempLockPath
);
7170 if( !pCtx
->lockProxyPath
){
7171 rc
= SQLITE_NOMEM_BKPT
;
7175 if( rc
==SQLITE_OK
){
7176 pCtx
->conchHeld
= 1;
7178 if( pCtx
->lockProxy
->pMethod
== &afpIoMethods
){
7179 afpLockingContext
*afpCtx
;
7180 afpCtx
= (afpLockingContext
*)pCtx
->lockProxy
->lockingContext
;
7181 afpCtx
->dbPath
= pCtx
->lockProxyPath
;
7184 conchFile
->pMethod
->xUnlock((sqlite3_file
*)conchFile
, NO_LOCK
);
7186 OSTRACE(("TAKECONCH %d %s\n", conchFile
->h
,
7187 rc
==SQLITE_OK
?"ok":"failed"));
7189 } while (1); /* in case we need to retry the :auto: lock file -
7190 ** we should never get here except via the 'continue' call. */
7195 ** If pFile holds a lock on a conch file, then release that lock.
7197 static int proxyReleaseConch(unixFile
*pFile
){
7198 int rc
= SQLITE_OK
; /* Subroutine return code */
7199 proxyLockingContext
*pCtx
; /* The locking context for the proxy lock */
7200 unixFile
*conchFile
; /* Name of the conch file */
7202 pCtx
= (proxyLockingContext
*)pFile
->lockingContext
;
7203 conchFile
= pCtx
->conchFile
;
7204 OSTRACE(("RELEASECONCH %d for %s pid=%d\n", conchFile
->h
,
7205 (pCtx
->lockProxyPath
? pCtx
->lockProxyPath
: ":auto:"),
7207 if( pCtx
->conchHeld
>0 ){
7208 rc
= conchFile
->pMethod
->xUnlock((sqlite3_file
*)conchFile
, NO_LOCK
);
7210 pCtx
->conchHeld
= 0;
7211 OSTRACE(("RELEASECONCH %d %s\n", conchFile
->h
,
7212 (rc
==SQLITE_OK
? "ok" : "failed")));
7217 ** Given the name of a database file, compute the name of its conch file.
7218 ** Store the conch filename in memory obtained from sqlite3_malloc64().
7219 ** Make *pConchPath point to the new name. Return SQLITE_OK on success
7220 ** or SQLITE_NOMEM if unable to obtain memory.
7222 ** The caller is responsible for ensuring that the allocated memory
7223 ** space is eventually freed.
7225 ** *pConchPath is set to NULL if a memory allocation error occurs.
7227 static int proxyCreateConchPathname(char *dbPath
, char **pConchPath
){
7228 int i
; /* Loop counter */
7229 int len
= (int)strlen(dbPath
); /* Length of database filename - dbPath */
7230 char *conchPath
; /* buffer in which to construct conch name */
7232 /* Allocate space for the conch filename and initialize the name to
7233 ** the name of the original database file. */
7234 *pConchPath
= conchPath
= (char *)sqlite3_malloc64(len
+ 8);
7236 return SQLITE_NOMEM_BKPT
;
7238 memcpy(conchPath
, dbPath
, len
+1);
7240 /* now insert a "." before the last / character */
7241 for( i
=(len
-1); i
>=0; i
-- ){
7242 if( conchPath
[i
]=='/' ){
7249 conchPath
[i
+1]=dbPath
[i
];
7253 /* append the "-conch" suffix to the file */
7254 memcpy(&conchPath
[i
+1], "-conch", 7);
7255 assert( (int)strlen(conchPath
) == len
+7 );
7261 /* Takes a fully configured proxy locking-style unix file and switches
7262 ** the local lock file path
7264 static int switchLockProxyPath(unixFile
*pFile
, const char *path
) {
7265 proxyLockingContext
*pCtx
= (proxyLockingContext
*)pFile
->lockingContext
;
7266 char *oldPath
= pCtx
->lockProxyPath
;
7269 if( pFile
->eFileLock
!=NO_LOCK
){
7273 /* nothing to do if the path is NULL, :auto: or matches the existing path */
7274 if( !path
|| path
[0]=='\0' || !strcmp(path
, ":auto:") ||
7275 (oldPath
&& !strncmp(oldPath
, path
, MAXPATHLEN
)) ){
7278 unixFile
*lockProxy
= pCtx
->lockProxy
;
7279 pCtx
->lockProxy
=NULL
;
7280 pCtx
->conchHeld
= 0;
7281 if( lockProxy
!=NULL
){
7282 rc
=lockProxy
->pMethod
->xClose((sqlite3_file
*)lockProxy
);
7284 sqlite3_free(lockProxy
);
7286 sqlite3_free(oldPath
);
7287 pCtx
->lockProxyPath
= sqlite3DbStrDup(0, path
);
7294 ** pFile is a file that has been opened by a prior xOpen call. dbPath
7295 ** is a string buffer at least MAXPATHLEN+1 characters in size.
7297 ** This routine find the filename associated with pFile and writes it
7300 static int proxyGetDbPathForUnixFile(unixFile
*pFile
, char *dbPath
){
7301 #if defined(__APPLE__)
7302 if( pFile
->pMethod
== &afpIoMethods
){
7303 /* afp style keeps a reference to the db path in the filePath field
7305 assert( (int)strlen((char*)pFile
->lockingContext
)<=MAXPATHLEN
);
7306 strlcpy(dbPath
, ((afpLockingContext
*)pFile
->lockingContext
)->dbPath
,
7310 if( pFile
->pMethod
== &dotlockIoMethods
){
7311 /* dot lock style uses the locking context to store the dot lock
7313 int len
= strlen((char *)pFile
->lockingContext
) - strlen(DOTLOCK_SUFFIX
);
7314 memcpy(dbPath
, (char *)pFile
->lockingContext
, len
+ 1);
7316 /* all other styles use the locking context to store the db file path */
7317 assert( strlen((char*)pFile
->lockingContext
)<=MAXPATHLEN
);
7318 strlcpy(dbPath
, (char *)pFile
->lockingContext
, MAXPATHLEN
);
7324 ** Takes an already filled in unix file and alters it so all file locking
7325 ** will be performed on the local proxy lock file. The following fields
7326 ** are preserved in the locking context so that they can be restored and
7327 ** the unix structure properly cleaned up at close time:
7331 static int proxyTransformUnixFile(unixFile
*pFile
, const char *path
) {
7332 proxyLockingContext
*pCtx
;
7333 char dbPath
[MAXPATHLEN
+1]; /* Name of the database file */
7334 char *lockPath
=NULL
;
7337 if( pFile
->eFileLock
!=NO_LOCK
){
7340 proxyGetDbPathForUnixFile(pFile
, dbPath
);
7341 if( !path
|| path
[0]=='\0' || !strcmp(path
, ":auto:") ){
7344 lockPath
=(char *)path
;
7347 OSTRACE(("TRANSPROXY %d for %s pid=%d\n", pFile
->h
,
7348 (lockPath
? lockPath
: ":auto:"), osGetpid(0)));
7350 pCtx
= sqlite3_malloc64( sizeof(*pCtx
) );
7352 return SQLITE_NOMEM_BKPT
;
7354 memset(pCtx
, 0, sizeof(*pCtx
));
7356 rc
= proxyCreateConchPathname(dbPath
, &pCtx
->conchFilePath
);
7357 if( rc
==SQLITE_OK
){
7358 rc
= proxyCreateUnixFile(pCtx
->conchFilePath
, &pCtx
->conchFile
, 0);
7359 if( rc
==SQLITE_CANTOPEN
&& ((pFile
->openFlags
&O_RDWR
) == 0) ){
7360 /* if (a) the open flags are not O_RDWR, (b) the conch isn't there, and
7361 ** (c) the file system is read-only, then enable no-locking access.
7362 ** Ugh, since O_RDONLY==0x0000 we test for !O_RDWR since unixOpen asserts
7363 ** that openFlags will have only one of O_RDONLY or O_RDWR.
7365 struct statfs fsInfo
;
7366 struct stat conchInfo
;
7369 if( osStat(pCtx
->conchFilePath
, &conchInfo
) == -1 ) {
7371 if( (err
==ENOENT
) && (statfs(dbPath
, &fsInfo
) != -1) ){
7372 goLockless
= (fsInfo
.f_flags
&MNT_RDONLY
) == MNT_RDONLY
;
7376 pCtx
->conchHeld
= -1; /* read only FS/ lockless */
7381 if( rc
==SQLITE_OK
&& lockPath
){
7382 pCtx
->lockProxyPath
= sqlite3DbStrDup(0, lockPath
);
7385 if( rc
==SQLITE_OK
){
7386 pCtx
->dbPath
= sqlite3DbStrDup(0, dbPath
);
7387 if( pCtx
->dbPath
==NULL
){
7388 rc
= SQLITE_NOMEM_BKPT
;
7391 if( rc
==SQLITE_OK
){
7392 /* all memory is allocated, proxys are created and assigned,
7393 ** switch the locking context and pMethod then return.
7395 pCtx
->oldLockingContext
= pFile
->lockingContext
;
7396 pFile
->lockingContext
= pCtx
;
7397 pCtx
->pOldMethod
= pFile
->pMethod
;
7398 pFile
->pMethod
= &proxyIoMethods
;
7400 if( pCtx
->conchFile
){
7401 pCtx
->conchFile
->pMethod
->xClose((sqlite3_file
*)pCtx
->conchFile
);
7402 sqlite3_free(pCtx
->conchFile
);
7404 sqlite3DbFree(0, pCtx
->lockProxyPath
);
7405 sqlite3_free(pCtx
->conchFilePath
);
7408 OSTRACE(("TRANSPROXY %d %s\n", pFile
->h
,
7409 (rc
==SQLITE_OK
? "ok" : "failed")));
7415 ** This routine handles sqlite3_file_control() calls that are specific
7416 ** to proxy locking.
7418 static int proxyFileControl(sqlite3_file
*id
, int op
, void *pArg
){
7420 case SQLITE_FCNTL_GET_LOCKPROXYFILE
: {
7421 unixFile
*pFile
= (unixFile
*)id
;
7422 if( pFile
->pMethod
== &proxyIoMethods
){
7423 proxyLockingContext
*pCtx
= (proxyLockingContext
*)pFile
->lockingContext
;
7424 proxyTakeConch(pFile
);
7425 if( pCtx
->lockProxyPath
){
7426 *(const char **)pArg
= pCtx
->lockProxyPath
;
7428 *(const char **)pArg
= ":auto: (not held)";
7431 *(const char **)pArg
= NULL
;
7435 case SQLITE_FCNTL_SET_LOCKPROXYFILE
: {
7436 unixFile
*pFile
= (unixFile
*)id
;
7438 int isProxyStyle
= (pFile
->pMethod
== &proxyIoMethods
);
7439 if( pArg
==NULL
|| (const char *)pArg
==0 ){
7441 /* turn off proxy locking - not supported. If support is added for
7442 ** switching proxy locking mode off then it will need to fail if
7443 ** the journal mode is WAL mode.
7445 rc
= SQLITE_ERROR
/*SQLITE_PROTOCOL? SQLITE_MISUSE?*/;
7447 /* turn off proxy locking - already off - NOOP */
7451 const char *proxyPath
= (const char *)pArg
;
7453 proxyLockingContext
*pCtx
=
7454 (proxyLockingContext
*)pFile
->lockingContext
;
7455 if( !strcmp(pArg
, ":auto:")
7456 || (pCtx
->lockProxyPath
&&
7457 !strncmp(pCtx
->lockProxyPath
, proxyPath
, MAXPATHLEN
))
7461 rc
= switchLockProxyPath(pFile
, proxyPath
);
7464 /* turn on proxy file locking */
7465 rc
= proxyTransformUnixFile(pFile
, proxyPath
);
7471 assert( 0 ); /* The call assures that only valid opcodes are sent */
7475 return SQLITE_ERROR
;
7479 ** Within this division (the proxying locking implementation) the procedures
7480 ** above this point are all utilities. The lock-related methods of the
7481 ** proxy-locking sqlite3_io_method object follow.
7486 ** This routine checks if there is a RESERVED lock held on the specified
7487 ** file by this or any other process. If such a lock is held, set *pResOut
7488 ** to a non-zero value otherwise *pResOut is set to zero. The return value
7489 ** is set to SQLITE_OK unless an I/O error occurs during lock checking.
7491 static int proxyCheckReservedLock(sqlite3_file
*id
, int *pResOut
) {
7492 unixFile
*pFile
= (unixFile
*)id
;
7493 int rc
= proxyTakeConch(pFile
);
7494 if( rc
==SQLITE_OK
){
7495 proxyLockingContext
*pCtx
= (proxyLockingContext
*)pFile
->lockingContext
;
7496 if( pCtx
->conchHeld
>0 ){
7497 unixFile
*proxy
= pCtx
->lockProxy
;
7498 return proxy
->pMethod
->xCheckReservedLock((sqlite3_file
*)proxy
, pResOut
);
7499 }else{ /* conchHeld < 0 is lockless */
7507 ** Lock the file with the lock specified by parameter eFileLock - one
7508 ** of the following:
7511 ** (2) RESERVED_LOCK
7513 ** (4) EXCLUSIVE_LOCK
7515 ** Sometimes when requesting one lock state, additional lock states
7516 ** are inserted in between. The locking might fail on one of the later
7517 ** transitions leaving the lock state different from what it started but
7518 ** still short of its goal. The following chart shows the allowed
7519 ** transitions and the inserted intermediate states:
7521 ** UNLOCKED -> SHARED
7522 ** SHARED -> RESERVED
7523 ** SHARED -> (PENDING) -> EXCLUSIVE
7524 ** RESERVED -> (PENDING) -> EXCLUSIVE
7525 ** PENDING -> EXCLUSIVE
7527 ** This routine will only increase a lock. Use the sqlite3OsUnlock()
7528 ** routine to lower a locking level.
7530 static int proxyLock(sqlite3_file
*id
, int eFileLock
) {
7531 unixFile
*pFile
= (unixFile
*)id
;
7532 int rc
= proxyTakeConch(pFile
);
7533 if( rc
==SQLITE_OK
){
7534 proxyLockingContext
*pCtx
= (proxyLockingContext
*)pFile
->lockingContext
;
7535 if( pCtx
->conchHeld
>0 ){
7536 unixFile
*proxy
= pCtx
->lockProxy
;
7537 rc
= proxy
->pMethod
->xLock((sqlite3_file
*)proxy
, eFileLock
);
7538 pFile
->eFileLock
= proxy
->eFileLock
;
7540 /* conchHeld < 0 is lockless */
7548 ** Lower the locking level on file descriptor pFile to eFileLock. eFileLock
7549 ** must be either NO_LOCK or SHARED_LOCK.
7551 ** If the locking level of the file descriptor is already at or below
7552 ** the requested locking level, this routine is a no-op.
7554 static int proxyUnlock(sqlite3_file
*id
, int eFileLock
) {
7555 unixFile
*pFile
= (unixFile
*)id
;
7556 int rc
= proxyTakeConch(pFile
);
7557 if( rc
==SQLITE_OK
){
7558 proxyLockingContext
*pCtx
= (proxyLockingContext
*)pFile
->lockingContext
;
7559 if( pCtx
->conchHeld
>0 ){
7560 unixFile
*proxy
= pCtx
->lockProxy
;
7561 rc
= proxy
->pMethod
->xUnlock((sqlite3_file
*)proxy
, eFileLock
);
7562 pFile
->eFileLock
= proxy
->eFileLock
;
7564 /* conchHeld < 0 is lockless */
7571 ** Close a file that uses proxy locks.
7573 static int proxyClose(sqlite3_file
*id
) {
7575 unixFile
*pFile
= (unixFile
*)id
;
7576 proxyLockingContext
*pCtx
= (proxyLockingContext
*)pFile
->lockingContext
;
7577 unixFile
*lockProxy
= pCtx
->lockProxy
;
7578 unixFile
*conchFile
= pCtx
->conchFile
;
7582 rc
= lockProxy
->pMethod
->xUnlock((sqlite3_file
*)lockProxy
, NO_LOCK
);
7584 rc
= lockProxy
->pMethod
->xClose((sqlite3_file
*)lockProxy
);
7586 sqlite3_free(lockProxy
);
7587 pCtx
->lockProxy
= 0;
7590 if( pCtx
->conchHeld
){
7591 rc
= proxyReleaseConch(pFile
);
7594 rc
= conchFile
->pMethod
->xClose((sqlite3_file
*)conchFile
);
7596 sqlite3_free(conchFile
);
7598 sqlite3DbFree(0, pCtx
->lockProxyPath
);
7599 sqlite3_free(pCtx
->conchFilePath
);
7600 sqlite3DbFree(0, pCtx
->dbPath
);
7601 /* restore the original locking context and pMethod then close it */
7602 pFile
->lockingContext
= pCtx
->oldLockingContext
;
7603 pFile
->pMethod
= pCtx
->pOldMethod
;
7605 return pFile
->pMethod
->xClose(id
);
7612 #endif /* defined(__APPLE__) && SQLITE_ENABLE_LOCKING_STYLE */
7614 ** The proxy locking style is intended for use with AFP filesystems.
7615 ** And since AFP is only supported on MacOSX, the proxy locking is also
7616 ** restricted to MacOSX.
7619 ******************* End of the proxy lock implementation **********************
7620 ******************************************************************************/
7623 ** Initialize the operating system interface.
7625 ** This routine registers all VFS implementations for unix-like operating
7626 ** systems. This routine, and the sqlite3_os_end() routine that follows,
7627 ** should be the only routines in this file that are visible from other
7630 ** This routine is called once during SQLite initialization and by a
7631 ** single thread. The memory allocation and mutex subsystems have not
7632 ** necessarily been initialized when this routine is called, and so they
7633 ** should not be used.
7635 int sqlite3_os_init(void){
7637 ** The following macro defines an initializer for an sqlite3_vfs object.
7638 ** The name of the VFS is NAME. The pAppData is a pointer to a pointer
7639 ** to the "finder" function. (pAppData is a pointer to a pointer because
7640 ** silly C90 rules prohibit a void* from being cast to a function pointer
7641 ** and so we have to go through the intermediate pointer to avoid problems
7642 ** when compiling with -pedantic-errors on GCC.)
7644 ** The FINDER parameter to this macro is the name of the pointer to the
7645 ** finder-function. The finder-function returns a pointer to the
7646 ** sqlite_io_methods object that implements the desired locking
7647 ** behaviors. See the division above that contains the IOMETHODS
7648 ** macro for addition information on finder-functions.
7650 ** Most finders simply return a pointer to a fixed sqlite3_io_methods
7651 ** object. But the "autolockIoFinder" available on MacOSX does a little
7652 ** more than that; it looks at the filesystem type that hosts the
7653 ** database file and tries to choose an locking method appropriate for
7654 ** that filesystem time.
7656 #define UNIXVFS(VFSNAME, FINDER) { \
7658 sizeof(unixFile), /* szOsFile */ \
7659 MAX_PATHNAME, /* mxPathname */ \
7661 VFSNAME, /* zName */ \
7662 (void*)&FINDER, /* pAppData */ \
7663 unixOpen, /* xOpen */ \
7664 unixDelete, /* xDelete */ \
7665 unixAccess, /* xAccess */ \
7666 unixFullPathname, /* xFullPathname */ \
7667 unixDlOpen, /* xDlOpen */ \
7668 unixDlError, /* xDlError */ \
7669 unixDlSym, /* xDlSym */ \
7670 unixDlClose, /* xDlClose */ \
7671 unixRandomness, /* xRandomness */ \
7672 unixSleep, /* xSleep */ \
7673 unixCurrentTime, /* xCurrentTime */ \
7674 unixGetLastError, /* xGetLastError */ \
7675 unixCurrentTimeInt64, /* xCurrentTimeInt64 */ \
7676 unixSetSystemCall, /* xSetSystemCall */ \
7677 unixGetSystemCall, /* xGetSystemCall */ \
7678 unixNextSystemCall, /* xNextSystemCall */ \
7682 ** All default VFSes for unix are contained in the following array.
7684 ** Note that the sqlite3_vfs.pNext field of the VFS object is modified
7685 ** by the SQLite core when the VFS is registered. So the following
7686 ** array cannot be const.
7688 static sqlite3_vfs aVfs
[] = {
7689 #if SQLITE_ENABLE_LOCKING_STYLE && defined(__APPLE__)
7690 UNIXVFS("unix", autolockIoFinder
),
7692 UNIXVFS("unix", vxworksIoFinder
),
7694 UNIXVFS("unix", posixIoFinder
),
7696 UNIXVFS("unix-none", nolockIoFinder
),
7697 UNIXVFS("unix-dotfile", dotlockIoFinder
),
7698 UNIXVFS("unix-excl", posixIoFinder
),
7700 UNIXVFS("unix-namedsem", semIoFinder
),
7702 #if SQLITE_ENABLE_LOCKING_STYLE || OS_VXWORKS
7703 UNIXVFS("unix-posix", posixIoFinder
),
7705 #if SQLITE_ENABLE_LOCKING_STYLE
7706 UNIXVFS("unix-flock", flockIoFinder
),
7708 #if SQLITE_ENABLE_LOCKING_STYLE && defined(__APPLE__)
7709 UNIXVFS("unix-afp", afpIoFinder
),
7710 UNIXVFS("unix-nfs", nfsIoFinder
),
7711 UNIXVFS("unix-proxy", proxyIoFinder
),
7714 unsigned int i
; /* Loop counter */
7716 /* Double-check that the aSyscall[] array has been constructed
7717 ** correctly. See ticket [bb3a86e890c8e96ab] */
7718 assert( ArraySize(aSyscall
)==29 );
7720 /* Register all VFSes defined in the aVfs[] array */
7721 for(i
=0; i
<(sizeof(aVfs
)/sizeof(sqlite3_vfs
)); i
++){
7722 sqlite3_vfs_register(&aVfs
[i
], i
==0);
7724 unixBigLock
= sqlite3MutexAlloc(SQLITE_MUTEX_STATIC_VFS1
);
7729 ** Shutdown the operating system interface.
7731 ** Some operating systems might need to do some cleanup in this routine,
7732 ** to release dynamically allocated objects. But not on unix.
7733 ** This routine is a no-op for unix.
7735 int sqlite3_os_end(void){
7740 #endif /* SQLITE_OS_UNIX */