gspawn.c 73.9 KB
Newer Older
Havoc Pennington's avatar
Havoc Pennington committed
1 2 3 4 5 6
/* gspawn.c - Process launching
 *
 *  Copyright 2000 Red Hat, Inc.
 *  g_execvpe implementation based on GNU libc execvp:
 *   Copyright 1991, 92, 95, 96, 97, 98, 99 Free Software Foundation, Inc.
 *
7 8 9
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
10
 * version 2.1 of the License, or (at your option) any later version.
Havoc Pennington's avatar
Havoc Pennington committed
11
 *
12
 * This library is distributed in the hope that it will be useful,
Havoc Pennington's avatar
Havoc Pennington committed
13 14 15 16
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
17 18
 * You should have received a copy of the GNU Lesser General Public License
 * along with this library; if not, see <http://www.gnu.org/licenses/>.
Havoc Pennington's avatar
Havoc Pennington committed
19 20
 */

21
#include "config.h"
Owen Taylor's avatar
Owen Taylor committed
22

Havoc Pennington's avatar
Havoc Pennington committed
23 24 25 26 27 28 29 30
#include <sys/time.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <unistd.h>
#include <errno.h>
#include <fcntl.h>
#include <signal.h>
#include <string.h>
31
#include <stdlib.h>   /* for fdwalk */
32
#include <dirent.h>
33 34

#ifdef HAVE_SPAWN_H
35
#include <spawn.h>
36
#endif /* HAVE_SPAWN_H */
Havoc Pennington's avatar
Havoc Pennington committed
37

Ting-Wei Lan's avatar
Ting-Wei Lan committed
38 39 40 41
#ifdef HAVE_CRT_EXTERNS_H
#include <crt_externs.h> /* for _NSGetEnviron */
#endif

42 43 44 45
#ifdef HAVE_SYS_SELECT_H
#include <sys/select.h>
#endif /* HAVE_SYS_SELECT_H */

46 47 48 49
#ifdef HAVE_SYS_RESOURCE_H
#include <sys/resource.h>
#endif /* HAVE_SYS_RESOURCE_H */

50
#include "gspawn.h"
51
#include "gspawn-private.h"
Matthias Clasen's avatar
Matthias Clasen committed
52
#include "gthread.h"
Colin Walters's avatar
Colin Walters committed
53
#include "glib/gstdio.h"
54

55
#include "genviron.h"
56
#include "gmem.h"
57
#include "gshell.h"
58
#include "gstring.h"
59
#include "gstrfuncs.h"
60 61
#include "gtestutils.h"
#include "gutils.h"
Owen Taylor's avatar
Owen Taylor committed
62
#include "glibintl.h"
63
#include "glib-unix.h"
64

65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80
/* posix_spawn() is assumed the fastest way to spawn, but glibc's
 * implementation was buggy before glibc 2.24, so avoid it on old versions.
 */
#ifdef HAVE_POSIX_SPAWN
#ifdef __GLIBC__

#if __GLIBC_PREREQ(2,24)
#define POSIX_SPAWN_AVAILABLE
#endif

#else /* !__GLIBC__ */
/* Assume that all non-glibc posix_spawn implementations are fine. */
#define POSIX_SPAWN_AVAILABLE
#endif /* __GLIBC__ */
#endif /* HAVE_POSIX_SPAWN */

Ting-Wei Lan's avatar
Ting-Wei Lan committed
81 82 83 84 85 86
#ifdef HAVE__NSGETENVIRON
#define environ (*_NSGetEnviron())
#else
extern char **environ;
#endif

87 88 89 90 91 92
#ifndef O_CLOEXEC
#define O_CLOEXEC 0
#else
#define HAVE_O_CLOEXEC 1
#endif

93 94 95 96
/**
 * SECTION:spawn
 * @Short_description: process launching
 * @Title: Spawning Processes
97 98 99 100 101 102 103 104 105 106 107
 *
 * GLib supports spawning of processes with an API that is more
 * convenient than the bare UNIX fork() and exec().
 *
 * The g_spawn family of functions has synchronous (g_spawn_sync())
 * and asynchronous variants (g_spawn_async(), g_spawn_async_with_pipes()),
 * as well as convenience variants that take a complete shell-like
 * commandline (g_spawn_command_line_sync(), g_spawn_command_line_async()).
 *
 * See #GSubprocess in GIO for a higher-level API that provides
 * stream interfaces for communication with child processes.
108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150
 *
 * An example of using g_spawn_async_with_pipes():
 * |[<!-- language="C" -->
 * const gchar * const argv[] = { "my-favourite-program", "--args", NULL };
 * gint child_stdout, child_stderr;
 * GPid child_pid;
 * g_autoptr(GError) error = NULL;
 *
 * // Spawn child process.
 * g_spawn_async_with_pipes (NULL, argv, NULL, G_SPAWN_DO_NOT_REAP_CHILD, NULL,
 *                           NULL, &child_pid, NULL, &child_stdout,
 *                           &child_stderr, &error);
 * if (error != NULL)
 *   {
 *     g_error ("Spawning child failed: %s", error->message);
 *     return;
 *   }
 *
 * // Add a child watch function which will be called when the child process
 * // exits.
 * g_child_watch_add (child_pid, child_watch_cb, NULL);
 *
 * // You could watch for output on @child_stdout and @child_stderr using
 * // #GUnixInputStream or #GIOChannel here.
 *
 * static void
 * child_watch_cb (GPid     pid,
 *                 gint     status,
 *                 gpointer user_data)
 * {
 *   g_message ("Child %" G_PID_FORMAT " exited %s", pid,
 *              g_spawn_check_exit_status (status, NULL) ? "normally" : "abnormally");
 *
 *   // Free any resources associated with the child here, such as I/O channels
 *   // on its stdout and stderr FDs. If you have no code to put in the
 *   // child_watch_cb() callback, you can remove it and the g_child_watch_add()
 *   // call, but you must also remove the G_SPAWN_DO_NOT_REAP_CHILD flag,
 *   // otherwise the child process will stay around as a zombie until this
 *   // process exits.
 *
 *   g_spawn_close_pid (pid);
 * }
 * ]|
151 152 153 154
 */



Havoc Pennington's avatar
Havoc Pennington committed
155 156 157
static gint g_execute (const gchar  *file,
                       gchar **argv,
                       gchar **envp,
158 159
                       gboolean search_path,
                       gboolean search_path_from_envp);
Havoc Pennington's avatar
Havoc Pennington committed
160 161 162 163 164 165 166

static gboolean fork_exec_with_pipes (gboolean              intermediate_child,
                                      const gchar          *working_directory,
                                      gchar               **argv,
                                      gchar               **envp,
                                      gboolean              close_descriptors,
                                      gboolean              search_path,
167
                                      gboolean              search_path_from_envp,
Havoc Pennington's avatar
Havoc Pennington committed
168 169 170
                                      gboolean              stdout_to_null,
                                      gboolean              stderr_to_null,
                                      gboolean              child_inherits_stdin,
171
                                      gboolean              file_and_argv_zero,
172
                                      gboolean              cloexec_pipes,
Havoc Pennington's avatar
Havoc Pennington committed
173 174
                                      GSpawnChildSetupFunc  child_setup,
                                      gpointer              user_data,
Owen Taylor's avatar
Owen Taylor committed
175
                                      GPid                 *child_pid,
Havoc Pennington's avatar
Havoc Pennington committed
176 177 178 179 180
                                      gint                 *standard_input,
                                      gint                 *standard_output,
                                      gint                 *standard_error,
                                      GError              **error);

181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201
static gboolean fork_exec_with_fds (gboolean              intermediate_child,
                                    const gchar          *working_directory,
                                    gchar               **argv,
                                    gchar               **envp,
                                    gboolean              close_descriptors,
                                    gboolean              search_path,
                                    gboolean              search_path_from_envp,
                                    gboolean              stdout_to_null,
                                    gboolean              stderr_to_null,
                                    gboolean              child_inherits_stdin,
                                    gboolean              file_and_argv_zero,
                                    gboolean              cloexec_pipes,
                                    GSpawnChildSetupFunc  child_setup,
                                    gpointer              user_data,
                                    GPid                 *child_pid,
                                    gint                 *child_close_fds,
                                    gint                  stdin_fd,
                                    gint                  stdout_fd,
                                    gint                  stderr_fd,
                                    GError              **error);

202 203
G_DEFINE_QUARK (g-exec-error-quark, g_spawn_error)
G_DEFINE_QUARK (g-spawn-exit-error-quark, g_spawn_exit_error)
204

Havoc Pennington's avatar
Havoc Pennington committed
205 206
/**
 * g_spawn_async:
207 208 209 210 211 212
 * @working_directory: (type filename) (nullable): child's current working
 *     directory, or %NULL to inherit parent's
 * @argv: (array zero-terminated=1) (element-type filename):
 *     child's argument vector
 * @envp: (array zero-terminated=1) (element-type filename) (nullable):
 *     child's environment, or %NULL to inherit parent's
Havoc Pennington's avatar
Havoc Pennington committed
213
 * @flags: flags from #GSpawnFlags
214
 * @child_setup: (scope async) (nullable): function to run in the child just before exec()
215
 * @user_data: (closure): user data for @child_setup
216
 * @child_pid: (out) (optional): return location for child process reference, or %NULL
Havoc Pennington's avatar
Havoc Pennington committed
217 218 219 220
 * @error: return location for error
 * 
 * See g_spawn_async_with_pipes() for a full description; this function
 * simply calls the g_spawn_async_with_pipes() without any pipes.
221 222 223
 *
 * You should call g_spawn_close_pid() on the returned child process
 * reference when you don't need it any more.
Havoc Pennington's avatar
Havoc Pennington committed
224
 * 
225 226 227
 * If you are writing a GTK+ application, and the program you are spawning is a
 * graphical application too, then to ensure that the spawned program opens its
 * windows on the right screen, you may want to use #GdkAppLaunchContext,
228
 * #GAppLaunchContext, or set the %DISPLAY environment variable.
229
 *
230 231 232
 * Note that the returned @child_pid on Windows is a handle to the child
 * process and not its identifier. Process handles and process identifiers
 * are different concepts on Windows.
233
 *
234
 * Returns: %TRUE on success, %FALSE if error is set
Havoc Pennington's avatar
Havoc Pennington committed
235 236 237 238 239 240 241 242
 **/
gboolean
g_spawn_async (const gchar          *working_directory,
               gchar               **argv,
               gchar               **envp,
               GSpawnFlags           flags,
               GSpawnChildSetupFunc  child_setup,
               gpointer              user_data,
Owen Taylor's avatar
Owen Taylor committed
243
               GPid                 *child_pid,
Havoc Pennington's avatar
Havoc Pennington committed
244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261
               GError              **error)
{
  g_return_val_if_fail (argv != NULL, FALSE);
  
  return g_spawn_async_with_pipes (working_directory,
                                   argv, envp,
                                   flags,
                                   child_setup,
                                   user_data,
                                   child_pid,
                                   NULL, NULL, NULL,
                                   error);
}

/* Avoids a danger in threaded situations (calling close()
 * on a file descriptor twice, and another thread has
 * re-opened it since the first close)
 */
Colin Walters's avatar
Colin Walters committed
262
static void
Havoc Pennington's avatar
Havoc Pennington committed
263 264
close_and_invalidate (gint *fd)
{
265
  if (*fd < 0)
Colin Walters's avatar
Colin Walters committed
266
    return;
267 268
  else
    {
Colin Walters's avatar
Colin Walters committed
269
      (void) g_close (*fd, NULL);
270 271
      *fd = -1;
    }
Havoc Pennington's avatar
Havoc Pennington committed
272 273
}

Matthias Clasen's avatar
Matthias Clasen committed
274
/* Some versions of OS X define READ_OK in public headers */
275 276
#undef READ_OK

Havoc Pennington's avatar
Havoc Pennington committed
277 278 279 280 281 282 283 284 285 286 287 288
typedef enum
{
  READ_FAILED = 0, /* FALSE */
  READ_OK,
  READ_EOF
} ReadResult;

static ReadResult
read_data (GString *str,
           gint     fd,
           GError **error)
{
289 290
  gssize bytes;
  gchar buf[4096];
Havoc Pennington's avatar
Havoc Pennington committed
291 292

 again:
293
  bytes = read (fd, buf, 4096);
Havoc Pennington's avatar
Havoc Pennington committed
294 295 296 297 298 299 300 301

  if (bytes == 0)
    return READ_EOF;
  else if (bytes > 0)
    {
      g_string_append_len (str, buf, bytes);
      return READ_OK;
    }
302
  else if (errno == EINTR)
Havoc Pennington's avatar
Havoc Pennington committed
303
    goto again;
304
  else
Havoc Pennington's avatar
Havoc Pennington committed
305
    {
Christian Persch's avatar
Christian Persch committed
306 307
      int errsv = errno;

Havoc Pennington's avatar
Havoc Pennington committed
308 309 310 311
      g_set_error (error,
                   G_SPAWN_ERROR,
                   G_SPAWN_ERROR_READ,
                   _("Failed to read data from child process (%s)"),
Christian Persch's avatar
Christian Persch committed
312
                   g_strerror (errsv));
313

Havoc Pennington's avatar
Havoc Pennington committed
314 315 316 317 318 319
      return READ_FAILED;
    }
}

/**
 * g_spawn_sync:
320 321 322 323 324 325
 * @working_directory: (type filename) (nullable): child's current working
 *     directory, or %NULL to inherit parent's
 * @argv: (array zero-terminated=1) (element-type filename):
 *     child's argument vector
 * @envp: (array zero-terminated=1) (element-type filename) (nullable):
 *     child's environment, or %NULL to inherit parent's
326
 * @flags: flags from #GSpawnFlags
327
 * @child_setup: (scope async) (nullable): function to run in the child just before exec()
328
 * @user_data: (closure): user data for @child_setup
329 330 331
 * @standard_output: (out) (array zero-terminated=1) (element-type guint8) (optional): return location for child output, or %NULL
 * @standard_error: (out) (array zero-terminated=1) (element-type guint8) (optional): return location for child error messages, or %NULL
 * @exit_status: (out) (optional): return location for child exit status, as returned by waitpid(), or %NULL
332
 * @error: return location for error, or %NULL
Havoc Pennington's avatar
Havoc Pennington committed
333 334 335
 *
 * Executes a child synchronously (waits for the child to exit before returning).
 * All output from the child is stored in @standard_output and @standard_error,
336 337 338
 * if those parameters are non-%NULL. Note that you must set the  
 * %G_SPAWN_STDOUT_TO_DEV_NULL and %G_SPAWN_STDERR_TO_DEV_NULL flags when
 * passing %NULL for @standard_output and @standard_error.
339 340
 *
 * If @exit_status is non-%NULL, the platform-specific exit status of
341
 * the child is stored there; see the documentation of
342 343
 * g_spawn_check_exit_status() for how to use and interpret this.
 * Note that it is invalid to pass %G_SPAWN_DO_NOT_REAP_CHILD in
344 345
 * @flags, and on POSIX platforms, the same restrictions as for
 * g_child_watch_source_new() apply.
346 347 348
 *
 * If an error occurs, no data is returned in @standard_output,
 * @standard_error, or @exit_status.
349
 *
350 351 352
 * This function calls g_spawn_async_with_pipes() internally; see that
 * function for full details on the other parameters and details on
 * how these functions work on Windows.
Havoc Pennington's avatar
Havoc Pennington committed
353
 * 
354
 * Returns: %TRUE on success, %FALSE if an error was set
355
 */
Havoc Pennington's avatar
Havoc Pennington committed
356 357 358 359 360 361 362 363 364 365 366 367 368 369
gboolean
g_spawn_sync (const gchar          *working_directory,
              gchar               **argv,
              gchar               **envp,
              GSpawnFlags           flags,
              GSpawnChildSetupFunc  child_setup,
              gpointer              user_data,
              gchar               **standard_output,
              gchar               **standard_error,
              gint                 *exit_status,
              GError              **error)     
{
  gint outpipe = -1;
  gint errpipe = -1;
Owen Taylor's avatar
Owen Taylor committed
370
  GPid pid;
Havoc Pennington's avatar
Havoc Pennington committed
371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399
  fd_set fds;
  gint ret;
  GString *outstr = NULL;
  GString *errstr = NULL;
  gboolean failed;
  gint status;
  
  g_return_val_if_fail (argv != NULL, FALSE);
  g_return_val_if_fail (!(flags & G_SPAWN_DO_NOT_REAP_CHILD), FALSE);
  g_return_val_if_fail (standard_output == NULL ||
                        !(flags & G_SPAWN_STDOUT_TO_DEV_NULL), FALSE);
  g_return_val_if_fail (standard_error == NULL ||
                        !(flags & G_SPAWN_STDERR_TO_DEV_NULL), FALSE);
  
  /* Just to ensure segfaults if callers try to use
   * these when an error is reported.
   */
  if (standard_output)
    *standard_output = NULL;

  if (standard_error)
    *standard_error = NULL;
  
  if (!fork_exec_with_pipes (FALSE,
                             working_directory,
                             argv,
                             envp,
                             !(flags & G_SPAWN_LEAVE_DESCRIPTORS_OPEN),
                             (flags & G_SPAWN_SEARCH_PATH) != 0,
400
                             (flags & G_SPAWN_SEARCH_PATH_FROM_ENVP) != 0,
Havoc Pennington's avatar
Havoc Pennington committed
401 402 403
                             (flags & G_SPAWN_STDOUT_TO_DEV_NULL) != 0,
                             (flags & G_SPAWN_STDERR_TO_DEV_NULL) != 0,
                             (flags & G_SPAWN_CHILD_INHERITS_STDIN) != 0,
404
                             (flags & G_SPAWN_FILE_AND_ARGV_ZERO) != 0,
405
                             (flags & G_SPAWN_CLOEXEC_PIPES) != 0,
Havoc Pennington's avatar
Havoc Pennington committed
406 407 408 409 410 411 412 413 414 415 416 417 418 419 420
                             child_setup,
                             user_data,
                             &pid,
                             NULL,
                             standard_output ? &outpipe : NULL,
                             standard_error ? &errpipe : NULL,
                             error))
    return FALSE;

  /* Read data from child. */
  
  failed = FALSE;

  if (outpipe >= 0)
    {
421
      outstr = g_string_new (NULL);
Havoc Pennington's avatar
Havoc Pennington committed
422 423 424 425
    }
      
  if (errpipe >= 0)
    {
426
      errstr = g_string_new (NULL);
Havoc Pennington's avatar
Havoc Pennington committed
427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446
    }

  /* Read data until we get EOF on both pipes. */
  while (!failed &&
         (outpipe >= 0 ||
          errpipe >= 0))
    {
      ret = 0;
          
      FD_ZERO (&fds);
      if (outpipe >= 0)
        FD_SET (outpipe, &fds);
      if (errpipe >= 0)
        FD_SET (errpipe, &fds);
          
      ret = select (MAX (outpipe, errpipe) + 1,
                    &fds,
                    NULL, NULL,
                    NULL /* no timeout */);

447
      if (ret < 0)
Havoc Pennington's avatar
Havoc Pennington committed
448
        {
Christian Persch's avatar
Christian Persch committed
449 450
          int errsv = errno;

451 452 453
	  if (errno == EINTR)
	    continue;

Havoc Pennington's avatar
Havoc Pennington committed
454 455 456 457 458 459
          failed = TRUE;

          g_set_error (error,
                       G_SPAWN_ERROR,
                       G_SPAWN_ERROR_READ,
                       _("Unexpected error in select() reading data from a child process (%s)"),
Christian Persch's avatar
Christian Persch committed
460
                       g_strerror (errsv));
Havoc Pennington's avatar
Havoc Pennington committed
461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509
              
          break;
        }

      if (outpipe >= 0 && FD_ISSET (outpipe, &fds))
        {
          switch (read_data (outstr, outpipe, error))
            {
            case READ_FAILED:
              failed = TRUE;
              break;
            case READ_EOF:
              close_and_invalidate (&outpipe);
              outpipe = -1;
              break;
            default:
              break;
            }

          if (failed)
            break;
        }

      if (errpipe >= 0 && FD_ISSET (errpipe, &fds))
        {
          switch (read_data (errstr, errpipe, error))
            {
            case READ_FAILED:
              failed = TRUE;
              break;
            case READ_EOF:
              close_and_invalidate (&errpipe);
              errpipe = -1;
              break;
            default:
              break;
            }

          if (failed)
            break;
        }
    }

  /* These should only be open still if we had an error.  */
  
  if (outpipe >= 0)
    close_and_invalidate (&outpipe);
  if (errpipe >= 0)
    close_and_invalidate (&errpipe);
510 511 512
  
  /* Wait for child to exit, even if we have
   * an error pending.
513
   */
514 515 516 517 518 519 520 521 522 523 524 525
 again:
      
  ret = waitpid (pid, &status, 0);

  if (ret < 0)
    {
      if (errno == EINTR)
        goto again;
      else if (errno == ECHILD)
        {
          if (exit_status)
            {
526
              g_warning ("In call to g_spawn_sync(), exit status of a child process was requested but ECHILD was received by waitpid(). See the documentation of g_child_watch_source_new() for possible causes.");
527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548
            }
          else
            {
              /* We don't need the exit status. */
            }
        }
      else
        {
          if (!failed) /* avoid error pileups */
            {
              int errsv = errno;

              failed = TRUE;
                  
              g_set_error (error,
                           G_SPAWN_ERROR,
                           G_SPAWN_ERROR_READ,
                           _("Unexpected error in waitpid() (%s)"),
                           g_strerror (errsv));
            }
        }
    }
Havoc Pennington's avatar
Havoc Pennington committed
549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575
  
  if (failed)
    {
      if (outstr)
        g_string_free (outstr, TRUE);
      if (errstr)
        g_string_free (errstr, TRUE);

      return FALSE;
    }
  else
    {
      if (exit_status)
        *exit_status = status;
      
      if (standard_output)        
        *standard_output = g_string_free (outstr, FALSE);

      if (standard_error)
        *standard_error = g_string_free (errstr, FALSE);

      return TRUE;
    }
}

/**
 * g_spawn_async_with_pipes:
576 577 578 579 580 581 582
 * @working_directory: (type filename) (nullable): child's current working
 *     directory, or %NULL to inherit parent's, in the GLib file name encoding
 * @argv: (array zero-terminated=1) (element-type filename): child's argument
 *     vector, in the GLib file name encoding
 * @envp: (array zero-terminated=1) (element-type filename) (nullable):
 *     child's environment, or %NULL to inherit parent's, in the GLib file
 *     name encoding
Havoc Pennington's avatar
Havoc Pennington committed
583
 * @flags: flags from #GSpawnFlags
584
 * @child_setup: (scope async) (nullable): function to run in the child just before exec()
585
 * @user_data: (closure): user data for @child_setup
586 587 588 589
 * @child_pid: (out) (optional): return location for child process ID, or %NULL
 * @standard_input: (out) (optional): return location for file descriptor to write to child's stdin, or %NULL
 * @standard_output: (out) (optional): return location for file descriptor to read child's stdout, or %NULL
 * @standard_error: (out) (optional): return location for file descriptor to read child's stderr, or %NULL
Havoc Pennington's avatar
Havoc Pennington committed
590 591 592 593
 * @error: return location for error
 *
 * Executes a child program asynchronously (your program will not
 * block waiting for the child to exit). The child program is
594 595 596 597 598 599 600 601 602 603 604 605
 * specified by the only argument that must be provided, @argv.
 * @argv should be a %NULL-terminated array of strings, to be passed
 * as the argument vector for the child. The first string in @argv
 * is of course the name of the program to execute. By default, the
 * name of the program must be a full path. If @flags contains the
 * %G_SPAWN_SEARCH_PATH flag, the `PATH` environment variable is
 * used to search for the executable. If @flags contains the
 * %G_SPAWN_SEARCH_PATH_FROM_ENVP flag, the `PATH` variable from 
 * @envp is used to search for the executable. If both the
 * %G_SPAWN_SEARCH_PATH and %G_SPAWN_SEARCH_PATH_FROM_ENVP flags
 * are set, the `PATH` variable from @envp takes precedence over
 * the environment variable.
606
 *
607 608
 * If the program name is not a full path and %G_SPAWN_SEARCH_PATH flag is not
 * used, then the program will be run from the current directory (or
Stef Walter's avatar
Stef Walter committed
609
 * @working_directory, if specified); this might be unexpected or even
610
 * dangerous in some cases when the current directory is world-writable.
Havoc Pennington's avatar
Havoc Pennington committed
611
 *
612 613 614
 * On Windows, note that all the string or string vector arguments to
 * this function and the other g_spawn*() functions are in UTF-8, the
 * GLib file name encoding. Unicode characters that are not part of
Matthias Clasen's avatar
Matthias Clasen committed
615
 * the system codepage passed in these arguments will be correctly
616 617 618 619 620 621
 * available in the spawned program only if it uses wide character API
 * to retrieve its command line. For C programs built with Microsoft's
 * tools it is enough to make the program have a wmain() instead of
 * main(). wmain() has a wide character argument vector as parameter.
 *
 * At least currently, mingw doesn't support wmain(), so if you use
622 623
 * mingw to develop the spawned program, it should call
 * g_win32_get_command_line() to get arguments in UTF-8.
624
 *
625 626 627 628 629 630 631 632 633 634 635 636 637
 * On Windows the low-level child process creation API CreateProcess()
 * doesn't use argument vectors, but a command line. The C runtime
 * library's spawn*() family of functions (which g_spawn_async_with_pipes()
 * eventually calls) paste the argument vector elements together into
 * a command line, and the C runtime startup code does a corresponding
 * reconstruction of an argument vector from the command line, to be
 * passed to main(). Complications arise when you have argument vector
 * elements that contain spaces of double quotes. The spawn*() functions
 * don't do any quoting or escaping, but on the other hand the startup
 * code does do unquoting and unescaping in order to enable receiving
 * arguments with embedded spaces or double quotes. To work around this
 * asymmetry, g_spawn_async_with_pipes() will do quoting and escaping on
 * argument vector elements that need it before calling the C runtime
638
 * spawn() function.
639
 *
640 641 642 643
 * The returned @child_pid on Windows is a handle to the child
 * process, not its identifier. Process handles and process
 * identifiers are different concepts on Windows.
 *
644
 * @envp is a %NULL-terminated array of strings, where each string
645 646
 * has the form `KEY=VALUE`. This will become the child's environment.
 * If @envp is %NULL, the child inherits its parent's environment.
Havoc Pennington's avatar
Havoc Pennington committed
647 648
 *
 * @flags should be the bitwise OR of any flags you want to affect the
649
 * function's behaviour. The %G_SPAWN_DO_NOT_REAP_CHILD means that the
650 651 652 653 654
 * child will not automatically be reaped; you must use a child watch
 * (g_child_watch_add()) to be notified about the death of the child process,
 * otherwise it will stay around as a zombie process until this process exits.
 * Eventually you must call g_spawn_close_pid() on the @child_pid, in order to
 * free resources which may be associated with the child process. (On Unix,
655
 * using a child watch is equivalent to calling waitpid() or handling
656
 * the %SIGCHLD signal manually. On Windows, calling g_spawn_close_pid()
657
 * is equivalent to calling CloseHandle() on the process handle returned
658
 * in @child_pid). See g_child_watch_add().
659
 *
660 661 662 663 664
 * Open UNIX file descriptors marked as `FD_CLOEXEC` will be automatically
 * closed in the child process. %G_SPAWN_LEAVE_DESCRIPTORS_OPEN means that
 * other open file descriptors will be inherited by the child; otherwise all
 * descriptors except stdin/stdout/stderr will be closed before calling exec()
 * in the child. %G_SPAWN_SEARCH_PATH means that @argv[0] need not be an
665 666 667
 * absolute path, it will be looked for in the `PATH` environment
 * variable. %G_SPAWN_SEARCH_PATH_FROM_ENVP means need not be an
 * absolute path, it will be looked for in the `PATH` variable from
668 669
 * @envp. If both %G_SPAWN_SEARCH_PATH and %G_SPAWN_SEARCH_PATH_FROM_ENVP
 * are used, the value from @envp takes precedence over the environment.
670 671
 * %G_SPAWN_STDOUT_TO_DEV_NULL means that the child's standard output
 * will be discarded, instead of going to the same location as the parent's 
672
 * standard output. If you use this flag, @standard_output must be %NULL.
Havoc Pennington's avatar
Havoc Pennington committed
673
 * %G_SPAWN_STDERR_TO_DEV_NULL means that the child's standard error
674 675 676 677
 * will be discarded, instead of going to the same location as the parent's
 * standard error. If you use this flag, @standard_error must be %NULL.
 * %G_SPAWN_CHILD_INHERITS_STDIN means that the child will inherit the parent's
 * standard input (by default, the child's standard input is attached to
678
 * `/dev/null`). If you use this flag, @standard_input must be %NULL.
679
 * %G_SPAWN_FILE_AND_ARGV_ZERO means that the first element of @argv is
680 681 682
 * the file to execute, while the remaining elements are the actual
 * argument vector to pass to the file. Normally g_spawn_async_with_pipes()
 * uses @argv[0] as the file to execute, and passes all of @argv to the child.
Havoc Pennington's avatar
Havoc Pennington committed
683
 *
684 685 686
 * @child_setup and @user_data are a function and user data. On POSIX
 * platforms, the function is called in the child after GLib has
 * performed all the setup it plans to perform (including creating
687 688 689 690 691 692 693 694
 * pipes, closing file descriptors, etc.) but before calling exec().
 * That is, @child_setup is called just before calling exec() in the
 * child. Obviously actions taken in this function will only affect
 * the child, not the parent.
 *
 * On Windows, there is no separate fork() and exec() functionality.
 * Child processes are created and run with a single API call,
 * CreateProcess(). There is no sensible thing @child_setup
695
 * could be used for on Windows so it is ignored and not called.
Havoc Pennington's avatar
Havoc Pennington committed
696
 *
697
 * If non-%NULL, @child_pid will on Unix be filled with the child's
698 699
 * process ID. You can use the process ID to send signals to the child,
 * or to use g_child_watch_add() (or waitpid()) if you specified the
700 701 702 703
 * %G_SPAWN_DO_NOT_REAP_CHILD flag. On Windows, @child_pid will be
 * filled with a handle to the child process only if you specified the
 * %G_SPAWN_DO_NOT_REAP_CHILD flag. You can then access the child
 * process using the Win32 API, for example wait for its termination
704 705 706
 * with the WaitFor*() functions, or examine its exit code with
 * GetExitCodeProcess(). You should close the handle with CloseHandle()
 * or g_spawn_close_pid() when you no longer need it.
Havoc Pennington's avatar
Havoc Pennington committed
707
 *
Matthias Clasen's avatar
Matthias Clasen committed
708
 * If non-%NULL, the @standard_input, @standard_output, @standard_error
Havoc Pennington's avatar
Havoc Pennington committed
709 710 711
 * locations will be filled with file descriptors for writing to the child's
 * standard input or reading from its standard output or standard error.
 * The caller of g_spawn_async_with_pipes() must close these file descriptors
712 713
 * when they are no longer in use. If these parameters are %NULL, the
 * corresponding pipe won't be created.
714
 *
715 716
 * If @standard_input is %NULL, the child's standard input is attached to
 * `/dev/null` unless %G_SPAWN_CHILD_INHERITS_STDIN is set.
717
 *
718 719 720
 * If @standard_error is NULL, the child's standard error goes to the same 
 * location as the parent's standard error unless %G_SPAWN_STDERR_TO_DEV_NULL 
 * is set.
721
 *
722 723 724
 * If @standard_output is NULL, the child's standard output goes to the same 
 * location as the parent's standard output unless %G_SPAWN_STDOUT_TO_DEV_NULL 
 * is set.
Havoc Pennington's avatar
Havoc Pennington committed
725
 *
Matthias Clasen's avatar
Matthias Clasen committed
726
 * @error can be %NULL to ignore errors, or non-%NULL to report errors.
727 728
 * If an error is set, the function returns %FALSE. Errors are reported
 * even if they occur in the child (for example if the executable in
729 730 731
 * @argv[0] is not found). Typically the `message` field of returned
 * errors should be displayed to users. Possible errors are those from
 * the #G_SPAWN_ERROR domain.
Havoc Pennington's avatar
Havoc Pennington committed
732 733 734
 *
 * If an error occurs, @child_pid, @standard_input, @standard_output,
 * and @standard_error will not be filled with valid values.
Owen Taylor's avatar
Owen Taylor committed
735 736
 *
 * If @child_pid is not %NULL and an error does not occur then the returned
737
 * process reference must be closed using g_spawn_close_pid().
738
 *
739 740 741 742 743 744 745 746 747 748 749 750 751 752 753
 * On modern UNIX platforms, GLib can use an efficient process launching
 * codepath driven internally by posix_spawn(). This has the advantage of
 * avoiding the fork-time performance costs of cloning the parent process
 * address space, and avoiding associated memory overcommit checks that are
 * not relevant in the context of immediately executing a distinct process.
 * This optimized codepath will be used provided that the following conditions
 * are met:
 *
 * 1. %G_SPAWN_DO_NOT_REAP_CHILD is set
 * 2. %G_SPAWN_LEAVE_DESCRIPTORS_OPEN is set
 * 3. %G_SPAWN_SEARCH_PATH_FROM_ENVP is not set
 * 4. @working_directory is %NULL
 * 5. @child_setup is %NULL
 * 6. The program is of a recognised binary format, or has a shebang. Otherwise, GLib will have to execute the program through the shell, which is not done using the optimized codepath.
 *
754 755 756
 * If you are writing a GTK+ application, and the program you are spawning is a
 * graphical application too, then to ensure that the spawned program opens its
 * windows on the right screen, you may want to use #GdkAppLaunchContext,
757
 * #GAppLaunchContext, or set the %DISPLAY environment variable.
Havoc Pennington's avatar
Havoc Pennington committed
758
 * 
759
 * Returns: %TRUE on success, %FALSE if an error was set
760
 */
Havoc Pennington's avatar
Havoc Pennington committed
761 762 763 764 765 766 767
gboolean
g_spawn_async_with_pipes (const gchar          *working_directory,
                          gchar               **argv,
                          gchar               **envp,
                          GSpawnFlags           flags,
                          GSpawnChildSetupFunc  child_setup,
                          gpointer              user_data,
Owen Taylor's avatar
Owen Taylor committed
768
                          GPid                 *child_pid,
Havoc Pennington's avatar
Havoc Pennington committed
769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788
                          gint                 *standard_input,
                          gint                 *standard_output,
                          gint                 *standard_error,
                          GError              **error)
{
  g_return_val_if_fail (argv != NULL, FALSE);
  g_return_val_if_fail (standard_output == NULL ||
                        !(flags & G_SPAWN_STDOUT_TO_DEV_NULL), FALSE);
  g_return_val_if_fail (standard_error == NULL ||
                        !(flags & G_SPAWN_STDERR_TO_DEV_NULL), FALSE);
  /* can't inherit stdin if we have an input pipe. */
  g_return_val_if_fail (standard_input == NULL ||
                        !(flags & G_SPAWN_CHILD_INHERITS_STDIN), FALSE);
  
  return fork_exec_with_pipes (!(flags & G_SPAWN_DO_NOT_REAP_CHILD),
                               working_directory,
                               argv,
                               envp,
                               !(flags & G_SPAWN_LEAVE_DESCRIPTORS_OPEN),
                               (flags & G_SPAWN_SEARCH_PATH) != 0,
789
                               (flags & G_SPAWN_SEARCH_PATH_FROM_ENVP) != 0,
Havoc Pennington's avatar
Havoc Pennington committed
790 791 792
                               (flags & G_SPAWN_STDOUT_TO_DEV_NULL) != 0,
                               (flags & G_SPAWN_STDERR_TO_DEV_NULL) != 0,
                               (flags & G_SPAWN_CHILD_INHERITS_STDIN) != 0,
793
                               (flags & G_SPAWN_FILE_AND_ARGV_ZERO) != 0,
794
                               (flags & G_SPAWN_CLOEXEC_PIPES) != 0,
Havoc Pennington's avatar
Havoc Pennington committed
795 796 797 798 799 800 801 802 803
                               child_setup,
                               user_data,
                               child_pid,
                               standard_input,
                               standard_output,
                               standard_error,
                               error);
}

804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854
/**
 * g_spawn_async_with_fds:
 * @working_directory: (type filename) (nullable): child's current working directory, or %NULL to inherit parent's, in the GLib file name encoding
 * @argv: (array zero-terminated=1): child's argument vector, in the GLib file name encoding
 * @envp: (array zero-terminated=1) (nullable): child's environment, or %NULL to inherit parent's, in the GLib file name encoding
 * @flags: flags from #GSpawnFlags
 * @child_setup: (scope async) (nullable): function to run in the child just before exec()
 * @user_data: (closure): user data for @child_setup
 * @child_pid: (out) (optional): return location for child process ID, or %NULL
 * @stdin_fd: file descriptor to use for child's stdin, or -1
 * @stdout_fd: file descriptor to use for child's stdout, or -1
 * @stderr_fd: file descriptor to use for child's stderr, or -1
 * @error: return location for error
 *
 * Identical to g_spawn_async_with_pipes() but instead of
 * creating pipes for the stdin/stdout/stderr, you can pass existing
 * file descriptors into this function through the @stdin_fd,
 * @stdout_fd and @stderr_fd parameters. The following @flags
 * also have their behaviour slightly tweaked as a result:
 *
 * %G_SPAWN_STDOUT_TO_DEV_NULL means that the child's standard output
 * will be discarded, instead of going to the same location as the parent's
 * standard output. If you use this flag, @standard_output must be -1.
 * %G_SPAWN_STDERR_TO_DEV_NULL means that the child's standard error
 * will be discarded, instead of going to the same location as the parent's
 * standard error. If you use this flag, @standard_error must be -1.
 * %G_SPAWN_CHILD_INHERITS_STDIN means that the child will inherit the parent's
 * standard input (by default, the child's standard input is attached to
 * /dev/null). If you use this flag, @standard_input must be -1.
 *
 * It is valid to pass the same fd in multiple parameters (e.g. you can pass
 * a single fd for both stdout and stderr).
 *
 * Returns: %TRUE on success, %FALSE if an error was set
 *
 * Since: 2.58
 */
gboolean
g_spawn_async_with_fds (const gchar          *working_directory,
                        gchar               **argv,
                        gchar               **envp,
                        GSpawnFlags           flags,
                        GSpawnChildSetupFunc  child_setup,
                        gpointer              user_data,
                        GPid                 *child_pid,
                        gint                  stdin_fd,
                        gint                  stdout_fd,
                        gint                  stderr_fd,
                        GError              **error)
{
  g_return_val_if_fail (argv != NULL, FALSE);
855
  g_return_val_if_fail (stdout_fd < 0 ||
856
                        !(flags & G_SPAWN_STDOUT_TO_DEV_NULL), FALSE);
857
  g_return_val_if_fail (stderr_fd < 0 ||
858 859
                        !(flags & G_SPAWN_STDERR_TO_DEV_NULL), FALSE);
  /* can't inherit stdin if we have an input pipe. */
860
  g_return_val_if_fail (stdin_fd < 0 ||
861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884
                        !(flags & G_SPAWN_CHILD_INHERITS_STDIN), FALSE);

  return fork_exec_with_fds (!(flags & G_SPAWN_DO_NOT_REAP_CHILD),
                               working_directory,
                               argv,
                               envp,
                               !(flags & G_SPAWN_LEAVE_DESCRIPTORS_OPEN),
                               (flags & G_SPAWN_SEARCH_PATH) != 0,
                               (flags & G_SPAWN_SEARCH_PATH_FROM_ENVP) != 0,
                               (flags & G_SPAWN_STDOUT_TO_DEV_NULL) != 0,
                               (flags & G_SPAWN_STDERR_TO_DEV_NULL) != 0,
                               (flags & G_SPAWN_CHILD_INHERITS_STDIN) != 0,
                               (flags & G_SPAWN_FILE_AND_ARGV_ZERO) != 0,
                               (flags & G_SPAWN_CLOEXEC_PIPES) != 0,
                               child_setup,
                               user_data,
                               child_pid,
                               NULL,
                               stdin_fd,
                               stdout_fd,
                               stderr_fd,
                               error);
}

Havoc Pennington's avatar
Havoc Pennington committed
885 886
/**
 * g_spawn_command_line_sync:
887
 * @command_line: (type filename): a command line
888 889 890
 * @standard_output: (out) (array zero-terminated=1) (element-type guint8) (optional): return location for child output
 * @standard_error: (out) (array zero-terminated=1) (element-type guint8) (optional): return location for child errors
 * @exit_status: (out) (optional): return location for child exit status, as returned by waitpid()
Havoc Pennington's avatar
Havoc Pennington committed
891 892 893 894 895 896 897 898 899 900
 * @error: return location for errors
 *
 * A simple version of g_spawn_sync() with little-used parameters
 * removed, taking a command line instead of an argument vector.  See
 * g_spawn_sync() for full details. @command_line will be parsed by
 * g_shell_parse_argv(). Unlike g_spawn_sync(), the %G_SPAWN_SEARCH_PATH flag
 * is enabled. Note that %G_SPAWN_SEARCH_PATH can have security
 * implications, so consider using g_spawn_sync() directly if
 * appropriate. Possible errors are those from g_spawn_sync() and those
 * from g_shell_parse_argv().
901
 *
902 903 904
 * If @exit_status is non-%NULL, the platform-specific exit status of
 * the child is stored there; see the documentation of
 * g_spawn_check_exit_status() for how to use and interpret this.
Havoc Pennington's avatar
Havoc Pennington committed
905
 * 
906
 * On Windows, please note the implications of g_shell_parse_argv()
907 908 909
 * parsing @command_line. Parsing is done according to Unix shell rules, not 
 * Windows command interpreter rules.
 * Space is a separator, and backslashes are
910 911 912 913 914
 * special. Thus you cannot simply pass a @command_line containing
 * canonical Windows paths, like "c:\\program files\\app\\app.exe", as
 * the backslashes will be eaten, and the space will act as a
 * separator. You need to enclose such paths with single quotes, like
 * "'c:\\program files\\app\\app.exe' 'e:\\folder\\argument.txt'".
915
 *
916
 * Returns: %TRUE on success, %FALSE if an error was set
Havoc Pennington's avatar
Havoc Pennington committed
917 918 919 920 921 922 923 924 925
 **/
gboolean
g_spawn_command_line_sync (const gchar  *command_line,
                           gchar       **standard_output,
                           gchar       **standard_error,
                           gint         *exit_status,
                           GError      **error)
{
  gboolean retval;
926
  gchar **argv = NULL;
Havoc Pennington's avatar
Havoc Pennington committed
927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951

  g_return_val_if_fail (command_line != NULL, FALSE);
  
  if (!g_shell_parse_argv (command_line,
                           NULL, &argv,
                           error))
    return FALSE;
  
  retval = g_spawn_sync (NULL,
                         argv,
                         NULL,
                         G_SPAWN_SEARCH_PATH,
                         NULL,
                         NULL,
                         standard_output,
                         standard_error,
                         exit_status,
                         error);
  g_strfreev (argv);

  return retval;
}

/**
 * g_spawn_command_line_async:
952
 * @command_line: (type filename): a command line
Havoc Pennington's avatar
Havoc Pennington committed
953 954 955 956 957 958 959 960 961 962
 * @error: return location for errors
 * 
 * A simple version of g_spawn_async() that parses a command line with
 * g_shell_parse_argv() and passes it to g_spawn_async(). Runs a
 * command line in the background. Unlike g_spawn_async(), the
 * %G_SPAWN_SEARCH_PATH flag is enabled, other flags are not. Note
 * that %G_SPAWN_SEARCH_PATH can have security implications, so
 * consider using g_spawn_async() directly if appropriate. Possible
 * errors are those from g_shell_parse_argv() and g_spawn_async().
 * 
963 964
 * The same concerns on Windows apply as for g_spawn_command_line_sync().
 *
965
 * Returns: %TRUE on success, %FALSE if error is set
Havoc Pennington's avatar
Havoc Pennington committed
966 967 968 969 970 971
 **/
gboolean
g_spawn_command_line_async (const gchar *command_line,
                            GError     **error)
{
  gboolean retval;
972
  gchar **argv = NULL;
Havoc Pennington's avatar
Havoc Pennington committed
973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993

  g_return_val_if_fail (command_line != NULL, FALSE);

  if (!g_shell_parse_argv (command_line,
                           NULL, &argv,
                           error))
    return FALSE;
  
  retval = g_spawn_async (NULL,
                          argv,
                          NULL,
                          G_SPAWN_SEARCH_PATH,
                          NULL,
                          NULL,
                          NULL,
                          error);
  g_strfreev (argv);

  return retval;
}

994 995 996 997 998 999 1000 1001 1002 1003
/**
 * g_spawn_check_exit_status:
 * @exit_status: An exit code as returned from g_spawn_sync()
 * @error: a #GError
 *
 * Set @error if @exit_status indicates the child exited abnormally
 * (e.g. with a nonzero exit code, or via a fatal signal).
 *
 * The g_spawn_sync() and g_child_watch_add() family of APIs return an
 * exit status for subprocesses encoded in a platform-specific way.
1004 1005 1006 1007 1008 1009
 * On Unix, this is guaranteed to be in the same format waitpid() returns,
 * and on Windows it is guaranteed to be the result of GetExitCodeProcess().
 *
 * Prior to the introduction of this function in GLib 2.34, interpreting
 * @exit_status required use of platform-specific APIs, which is problematic
 * for software using GLib as a cross-platform layer.
1010 1011 1012
 *
 * Additionally, many programs simply want to determine whether or not
 * the child exited successfully, and either propagate a #GError or
1013 1014 1015
 * print a message to standard error. In that common case, this function
 * can be used. Note that the error message in @error will contain
 * human-readable information about the exit status.
1016
 *
1017 1018 1019 1020
 * The @domain and @code of @error have special semantics in the case
 * where the process has an "exit code", as opposed to being killed by
 * a signal. On Unix, this happens if WIFEXITED() would be true of
 * @exit_status. On Windows, it is always the case.
1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031
 *
 * The special semantics are that the actual exit code will be the
 * code set in @error, and the domain will be %G_SPAWN_EXIT_ERROR.
 * This allows you to differentiate between different exit codes.
 *
 * If the process was terminated by some means other than an exit
 * status, the domain will be %G_SPAWN_ERROR, and the code will be
 * %G_SPAWN_ERROR_FAILED.
 *
 * This function just offers convenience; you can of course also check
 * the available platform via a macro such as %G_OS_UNIX, and use
1032 1033 1034 1035 1036 1037
 * WIFEXITED() and WEXITSTATUS() on @exit_status directly. Do not attempt
 * to scan or parse the error message string; it may be translated and/or
 * change in future versions of GLib.
 *
 * Returns: %TRUE if child exited successfully, %FALSE otherwise (and
 *     @error will be set)
1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082
 *
 * Since: 2.34
 */
gboolean
g_spawn_check_exit_status (gint      exit_status,
			   GError  **error)
{
  gboolean ret = FALSE;

  if (WIFEXITED (exit_status))
    {
      if (WEXITSTATUS (exit_status) != 0)
	{
	  g_set_error (error, G_SPAWN_EXIT_ERROR, WEXITSTATUS (exit_status),
		       _("Child process exited with code %ld"),
		       (long) WEXITSTATUS (exit_status));
	  goto out;
	}
    }
  else if (WIFSIGNALED (exit_status))
    {
      g_set_error (error, G_SPAWN_ERROR, G_SPAWN_ERROR_FAILED,
		   _("Child process killed by signal %ld"),
		   (long) WTERMSIG (exit_status));
      goto out;
    }
  else if (WIFSTOPPED (exit_status))
    {
      g_set_error (error, G_SPAWN_ERROR, G_SPAWN_ERROR_FAILED,
		   _("Child process stopped by signal %ld"),
		   (long) WSTOPSIG (exit_status));
      goto out;
    }
  else
    {
      g_set_error (error, G_SPAWN_ERROR, G_SPAWN_ERROR_FAILED,
		   _("Child process exited abnormally"));
      goto out;
    }

  ret = TRUE;
 out:
  return ret;
}

1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105
static gssize
write_all (gint fd, gconstpointer vbuf, gsize to_write)
{
  gchar *buf = (gchar *) vbuf;
  
  while (to_write > 0)
    {
      gssize count = write (fd, buf, to_write);
      if (count < 0)
        {
          if (errno != EINTR)
            return FALSE;
        }
      else
        {
          to_write -= count;
          buf += count;
        }
    }
  
  return TRUE;
}

1106
G_GNUC_NORETURN
Havoc Pennington's avatar
Havoc Pennington committed
1107 1108 1109 1110 1111
static void
write_err_and_exit (gint fd, gint msg)
{
  gint en = errno;
  
1112 1113
  write_all (fd, &msg, sizeof(msg));
  write_all (fd, &en, sizeof(en));
Havoc Pennington's avatar
Havoc Pennington committed
1114 1115 1116 1117
  
  _exit (1);
}

1118
static int
1119
set_cloexec (void *data, gint fd)
Havoc Pennington's avatar
Havoc Pennington committed
1120
{
1121
  if (fd >= GPOINTER_TO_INT (data))
1122
    fcntl (fd, F_SETFD, FD_CLOEXEC);
1123 1124

  return 0;
Havoc Pennington's avatar
Havoc Pennington committed
1125 1126
}

1127 1128 1129 1130 1131 1132
#ifndef HAVE_FDWALK
static int
fdwalk (int (*cb)(void *data, int fd), void *data)
{
  gint open_max;
  gint fd;
1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171
  gint res = 0;
  
#ifdef HAVE_SYS_RESOURCE_H
  struct rlimit rl;
#endif

#ifdef __linux__  
  DIR *d;

  if ((d = opendir("/proc/self/fd"))) {
      struct dirent *de;

      while ((de = readdir(d))) {
          glong l;
          gchar *e = NULL;

          if (de->d_name[0] == '.')
              continue;
            
          errno = 0;
          l = strtol(de->d_name, &e, 10);
          if (errno != 0 || !e || *e)
              continue;

          fd = (gint) l;

          if ((glong) fd != l)
              continue;

          if (fd == dirfd(d))
              continue;

          if ((res = cb (data, fd)) != 0)
              break;
        }
      
      closedir(d);
      return res;
  }
1172

1173 1174 1175 1176 1177 1178 1179
  /* If /proc is not mounted or not accessible we fall back to the old
   * rlimit trick */

#endif
  
#ifdef HAVE_SYS_RESOURCE_H
      
Matthias Clasen's avatar
Matthias Clasen committed
1180
  if (getrlimit(RLIMIT_NOFILE, &rl) == 0 && rl.rlim_max != RLIM_INFINITY)
1181 1182 1183 1184 1185 1186 1187 1188
      open_max = rl.rlim_max;
  else
#endif
      open_max = sysconf (_SC_OPEN_MAX);

  for (fd = 0; fd < open_max; fd++)
      if ((res = cb (data, fd)) != 0)
          break;
1189 1190 1191 1192 1193

  return res;
}
#endif

Havoc Pennington's avatar
Havoc Pennington committed
1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206
static gint
sane_dup2 (gint fd1, gint fd2)
{
  gint ret;

 retry:
  ret = dup2 (fd1, fd2);
  if (ret < 0 && errno == EINTR)
    goto retry;

  return ret;
}

1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219
static gint
sane_open (const char *path, gint mode)
{
  gint ret;

 retry:
  ret = open (path, mode);
  if (ret < 0 && errno == EINTR)
    goto retry;

  return ret;
}

Havoc Pennington's avatar
Havoc Pennington committed
1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237
enum
{
  CHILD_CHDIR_FAILED,
  CHILD_EXEC_FAILED,
  CHILD_DUP2_FAILED,
  CHILD_FORK_FAILED
};

static void
do_exec (gint                  child_err_report_fd,
         gint                  stdin_fd,
         gint                  stdout_fd,
         gint                  stderr_fd,
         const gchar          *working_directory,
         gchar               **argv,
         gchar               **envp,
         gboolean              close_descriptors,
         gboolean              search_path,
1238
         gboolean              search_path_from_envp,
Havoc Pennington's avatar
Havoc Pennington committed
1239 1240 1241
         gboolean              stdout_to_null,
         gboolean              stderr_to_null,
         gboolean              child_inherits_stdin,
1242
         gboolean              file_and_argv_zero,
Havoc Pennington's avatar
Havoc Pennington committed
1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256
         GSpawnChildSetupFunc  child_setup,
         gpointer              user_data)
{
  if (working_directory && chdir (working_directory) < 0)
    write_err_and_exit (child_err_report_fd,
                        CHILD_CHDIR_FAILED);

  /* Close all file descriptors but stdin stdout and stderr as
   * soon as we exec. Note that this includes
   * child_err_report_fd, which keeps the parent from blocking
   * forever on the other end of that pipe.
   */
  if (close_descriptors)
    {
1257
      fdwalk (set_cloexec, GINT_TO_POINTER(3));
Havoc Pennington's avatar
Havoc Pennington committed
1258 1259 1260 1261
    }
  else
    {
      /* We need to do child_err_report_fd anyway */
1262
      set_cloexec (GINT_TO_POINTER(0), child_err_report_fd);
Havoc Pennington's avatar
Havoc Pennington committed
1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274
    }
  
  /* Redirect pipes as required */
  
  if (stdin_fd >= 0)
    {
      /* dup2 can't actually fail here I don't think */
          
      if (sane_dup2 (stdin_fd, 0) < 0)
        write_err_and_exit (child_err_report_fd,
                            CHILD_DUP2_FAILED);

1275
      set_cloexec (GINT_TO_POINTER(0), stdin_fd);
Havoc Pennington's avatar
Havoc Pennington committed
1276 1277 1278 1279
    }
  else if (!child_inherits_stdin)
    {
      /* Keep process from blocking on a read of stdin */
1280
      gint read_null = sane_open ("/dev/null", O_RDONLY);
1281
      g_assert (read_null != -1);
Havoc Pennington's avatar
Havoc Pennington committed
1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293
      sane_dup2 (read_null, 0);
      close_and_invalidate (&read_null);
    }

  if (stdout_fd >= 0)
    {
      /* dup2 can't actually fail here I don't think */
          
      if (sane_dup2 (stdout_fd, 1) < 0)
        write_err_and_exit (child_err_report_fd,
                            CHILD_DUP2_FAILED);

1294
      set_cloexec (GINT_TO_POINTER(0), stdout_fd);
Havoc Pennington's avatar
Havoc Pennington committed
1295 1296 1297
    }
  else if (stdout_to_null)
    {
1298
      gint write_null = sane_open ("/dev/null", O_WRONLY);
1299
      g_assert (write_null != -1);
Havoc Pennington's avatar
Havoc Pennington committed
1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311
      sane_dup2 (write_null, 1);
      close_and_invalidate (&write_null);
    }

  if (stderr_fd >= 0)
    {
      /* dup2 can't actually fail here I don't think */
          
      if (sane_dup2 (stderr_fd, 2) < 0)
        write_err_and_exit (child_err_report_fd,
                            CHILD_DUP2_FAILED);

1312
      set_cloexec (GINT_TO_POINTER(0), stderr_fd);
Havoc Pennington's avatar
Havoc Pennington committed
1313 1314 1315
    }
  else if (stderr_to_null)
    {
1316
      gint write_null = sane_open ("/dev/null", O_WRONLY);
Havoc Pennington's avatar
Havoc Pennington committed
1317 1318 1319 1320 1321 1322 1323 1324 1325 1326
      sane_dup2 (write_null, 2);
      close_and_invalidate (&write_null);
    }
  
  /* Call user function just before we exec */
  if (child_setup)
    {
      (* child_setup) (user_data);
    }

1327 1328
  g_execute (argv[0],
             file_and_argv_zero ? argv + 1 : argv,
1329
             envp, search_path, search_path_from_envp);
Havoc Pennington's avatar
Havoc Pennington committed
1330 1331 1332 1333 1334 1335 1336 1337 1338

  /* Exec failed */
  write_err_and_exit (child_err_report_fd,
                      CHILD_EXEC_FAILED);
}

static gboolean
read_ints (int      fd,
           gint*    buf,
1339 1340
           gint     n_ints_in_buf,    
           gint    *n_ints_read,      
Havoc Pennington's avatar
Havoc Pennington committed
1341 1342
           GError **error)
{
1343
  gsize bytes = 0;    
Havoc Pennington's avatar
Havoc Pennington committed
1344 1345 1346
  
  while (TRUE)
    {
1347
      gssize chunk;    
Havoc Pennington's avatar
Havoc Pennington committed
1348 1349 1350 1351 1352 1353 1354 1355 1356

      if (bytes >= sizeof(gint)*2)
        break; /* give up, who knows what happened, should not be
                * possible.
                */
          
    again:
      chunk = read (fd,
                    ((gchar*)buf) + bytes,
1357
                    sizeof(gint) * n_ints_in_buf - bytes);
Havoc Pennington's avatar
Havoc Pennington committed
1358 1359 1360 1361 1362
      if (chunk < 0 && errno == EINTR)
        goto again;
          
      if (chunk < 0)
        {
Christian Persch's avatar
Christian Persch committed
1363 1364
          int errsv = errno;

Havoc Pennington's avatar
Havoc Pennington committed
1365 1366 1367 1368 1369
          /* Some weird shit happened, bail out */
          g_set_error (error,
                       G_SPAWN_ERROR,
                       G_SPAWN_ERROR_FAILED,
                       _("Failed to read from child pipe (%s)"),
Christian Persch's avatar
Christian Persch committed
1370
                       g_strerror (errsv));
Havoc Pennington's avatar
Havoc Pennington committed
1371 1372 1373 1374 1375

          return FALSE;
        }
      else if (chunk == 0)
        break; /* EOF */
1376 1377
      else /* chunk > 0 */
	bytes += chunk;
Havoc Pennington's avatar
Havoc Pennington committed
1378 1379
    }

1380
  *n_ints_read = (gint)(bytes / sizeof(gint));
Havoc Pennington's avatar
Havoc Pennington committed
1381 1382 1383 1384

  return TRUE;
}

1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428
#ifdef POSIX_SPAWN_AVAILABLE
static gboolean
do_posix_spawn (gchar     **argv,
                gchar     **envp,
                gboolean    search_path,
                gboolean    stdout_to_null,
                gboolean    stderr_to_null,
                gboolean    child_inherits_stdin,
                gboolean    file_and_argv_zero,
                GPid       *child_pid,
                gint       *child_close_fds,
                gint        stdin_fd,
                gint        stdout_fd,
                gint        stderr_fd)
{
  pid_t pid;
  gchar **argv_pass;
  posix_spawnattr_t attr;
  posix_spawn_file_actions_t file_actions;
  gint parent_close_fds[3];
  gint num_parent_close_fds = 0;
  GSList *child_close = NULL;
  GSList *elem;
  sigset_t mask;
  int i, r;

  if (*argv[0] == '\0')
    {
      /* We check the simple case first. */
      return ENOENT;
    }

  r = posix_spawnattr_init (&attr);
  if (r != 0)
    return r;

  if (child_close_fds)
    {
      int i = -1;
      while (child_close_fds[++i] != -1)
        child_close = g_slist_prepend (child_close,
                                       GINT_TO_POINTER (child_close_fds[i]));
    }

1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446
  r = posix_spawnattr_setflags (&attr, POSIX_SPAWN_SETSIGDEF);
  if (r != 0)
    goto out_free_spawnattr;

  /* Reset some signal handlers that we may use */
  sigemptyset (&mask);
  sigaddset (&mask, SIGCHLD);
  sigaddset (&mask, SIGINT);
  sigaddset (&mask, SIGTERM);
  sigaddset (&mask, SIGHUP);

  r = posix_spawnattr_setsigdefault (&attr, &mask);
  if (r != 0)
    goto out_free_spawnattr;

  r = posix_spawn_file_actions_init (&file_actions);
  if (r != 0)
    goto out_free_spawnattr;
1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465

  /* Redirect pipes as required */

  if (stdin_fd >= 0)
    {
      r = posix_spawn_file_actions_adddup2 (&file_actions, stdin_fd, 0);
      if (r != 0)
        goto out_close_fds;

      if (!g_slist_find (child_close, GINT_TO_POINTER (stdin_fd)))
        child_close = g_slist_prepend (child_close, GINT_TO_POINTER (stdin_fd));
    }
  else if (!child_inherits_stdin)
    {
      /* Keep process from blocking on a read of stdin */
      gint read_null = sane_open ("/dev/null", O_RDONLY | O_CLOEXEC);
      g_assert (read_null != -1);
      parent_close_fds[num_parent_close_fds++] = read_null;

1466 1467 1468 1469
#ifndef HAVE_O_CLOEXEC
      fcntl (read_null, F_SETFD, FD_CLOEXEC);
#endif

1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489
      r = posix_spawn_file_actions_adddup2 (&file_actions, read_null, 0);
      if (r != 0)
        goto out_close_fds;
    }

  if (stdout_fd >= 0)
    {
      r = posix_spawn_file_actions_adddup2 (&file_actions, stdout_fd, 1);
      if (r != 0)
        goto out_close_fds;

      if (!g_slist_find (child_close, GINT_TO_POINTER (stdout_fd)))
        child_close = g_slist_prepend (child_close, GINT_TO_POINTER (stdout_fd));
    }
  else if (stdout_to_null)
    {
      gint write_null = sane_open ("/dev/null", O_WRONLY | O_CLOEXEC);
      g_assert (write_null != -1);
      parent_close_fds[num_parent_close_fds++] = write_null;

1490
#ifndef HAVE_O_CLOEXEC
1491
      fcntl (write_null, F_SETFD, FD_CLOEXEC);
1492 1493
#endif

1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513
      r = posix_spawn_file_actions_adddup2 (&file_actions, write_null, 1);
      if (r != 0)
        goto out_close_fds;
    }

  if (stderr_fd >= 0)
    {
      r = posix_spawn_file_actions_adddup2 (&file_actions, stderr_fd, 2);
      if (r != 0)
        goto out_close_fds;

      if (!g_slist_find (child_close, GINT_TO_POINTER (stderr_fd)))
        child_close = g_slist_prepend (child_close, GINT_TO_POINTER (stderr_fd));
    }
  else if (stderr_to_null)
    {
      gint write_null = sane_open ("/dev/null", O_WRONLY | O_CLOEXEC);
      g_assert (write_null != -1);
      parent_close_fds[num_parent_close_fds++] = write_null;

1514
#ifndef HAVE_O_CLOEXEC
1515
      fcntl (write_null, F_SETFD, FD_CLOEXEC);
1516 1517
#endif

1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563
      r = posix_spawn_file_actions_adddup2 (&file_actions, write_null, 2);
      if (r != 0)
        goto out_close_fds;
    }

  /* Intentionally close the fds in the child as the last file action,
   * having been careful not to add the same fd to this list twice.
   *
   * This is important to allow (e.g.) for the same fd to be passed as stdout
   * and stderr (we must not close it before we have dupped it in both places,
   * and we must not attempt to close it twice).
   */
  for (elem = child_close; elem != NULL; elem = elem->next)
    {
      r = posix_spawn_file_actions_addclose (&file_actions,
                                             GPOINTER_TO_INT (elem->data));
      if (r != 0)
        goto out_close_fds;
    }

  argv_pass = file_and_argv_zero ? argv + 1 : argv;
  if (envp == NULL)
    envp = environ;

  /* Don't search when it contains a slash. */
  if (!search_path || strchr (argv[0], '/') != NULL)
    r = posix_spawn (&pid, argv[0], &file_actions, &attr, argv_pass, envp);
  else
    r = posix_spawnp (&pid, argv[0], &file_actions, &attr, argv_pass, envp);

  if (r == 0 && child_pid != NULL)
    *child_pid = pid;

out_close_fds:
  for (i = 0; i < num_parent_close_fds; i++)
    close_and_invalidate (&parent_close_fds [i]);

  posix_spawn_file_actions_destroy (&file_actions);
out_free_spawnattr:
  posix_spawnattr_destroy (&attr);
  g_slist_free (child_close);

  return r;
}
#endif /* POSIX_SPAWN_AVAILABLE */

Havoc Pennington's avatar
Havoc Pennington committed
1564
static gboolean
1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584
fork_exec_with_fds (gboolean              intermediate_child,
                    const gchar          *working_directory,
                    gchar               **argv,
                    gchar               **envp,
                    gboolean              close_descriptors,
                    gboolean              search_path,
                    gboolean              search_path_from_envp,
                    gboolean              stdout_to_null,
                    gboolean              stderr_to_null,
                    gboolean              child_inherits_stdin,
                    gboolean              file_and_argv_zero,
                    gboolean              cloexec_pipes,
                    GSpawnChildSetupFunc  child_setup,
                    gpointer              user_data,
                    GPid                 *child_pid,
                    gint                 *child_close_fds,
                    gint                  stdin_fd,
                    gint                  stdout_fd,
                    gint                  stderr_fd,
                    GError              **error)
Havoc Pennington's avatar
Havoc Pennington committed
1585
{
Owen Taylor's avatar
Owen Taylor committed
1586
  GPid pid = -1;
Havoc Pennington's avatar
Havoc Pennington committed
1587 1588
  gint child_err_report_pipe[2] = { -1, -1 };
  gint child_pid_report_pipe[2] = { -1, -1 };
1589
  guint pipe_flags = cloexec_pipes ? FD_CLOEXEC : 0;
Havoc Pennington's avatar
Havoc Pennington committed
1590
  gint status;
1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616

#ifdef POSIX_SPAWN_AVAILABLE
  if (!intermediate_child && working_directory == NULL && !close_descriptors &&
      !search_path_from_envp && child_setup == NULL)
    {
      g_debug ("Launching with posix_spawn");
      status = do_posix_spawn (argv,
                               envp,
                               search_path,
                               stdout_to_null,
                               stderr_to_null,
                               child_inherits_stdin,
                               file_and_argv_zero,
                               child_pid,
                               child_close_fds,
                               stdin_fd,
                               stdout_fd,
                               stderr_fd);
      if (status == 0)
        return TRUE;

      if (status != ENOEXEC)
        {
          g_set_error (error,
                       G_SPAWN_ERROR,
                       G_SPAWN_ERROR_FAILED,
1617
                       _("Failed to spawn child process “%s” (%s)"),
1618 1619 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640
                       argv[0],
                       g_strerror (status));
          return FALSE;
       }

      /* posix_spawn is not intended to support script execution. It does in
       * some situations on some glibc versions, but that will be fixed.
       * So if it fails with ENOEXEC, we fall through to the regular
       * gspawn codepath so that script execution can be attempted,
       * per standard gspawn behaviour. */
      g_debug ("posix_spawn failed (ENOEXEC), fall back to regular gspawn");
    }
  else
    {
      g_debug ("posix_spawn avoided %s%s%s%s%s",
               !intermediate_child ? "" : "(automatic reaping requested) ",
               working_directory == NULL ? "" : "(workdir specified) ",
               !close_descriptors ? "" : "(fd close requested) ",
               !search_path_from_envp ? "" : "(using envp for search path) ",
               child_setup == NULL ? "" : "(child_setup specified) ");
    }
#endif /* POSIX_SPAWN_AVAILABLE */

1641
  if (!g_unix_open_pipe (child_err_report_pipe, pipe_flags, error))
Havoc Pennington's avatar
Havoc Pennington committed
1642 1643
    return FALSE;

1644
  if (intermediate_child && !g_unix_open_pipe (child_pid_report_pipe, pipe_flags, error))
Havoc Pennington's avatar
Havoc Pennington committed
1645 1646
    goto cleanup_and_fail;
  
1647
  pid = fork ();
Havoc Pennington's avatar
Havoc Pennington committed
1648 1649

  if (pid < 0)
Christian Persch's avatar
Christian Persch committed
1650 1651 1652
    {
      int errsv = errno;

Havoc Pennington's avatar
Havoc Pennington committed
1653 1654 1655 1656
      g_set_error (error,
                   G_SPAWN_ERROR,
                   G_SPAWN_ERROR_FORK,
                   _("Failed to fork (%s)"),
Christian Persch's avatar
Christian Persch committed
1657
                   g_strerror (errsv));
Havoc Pennington's avatar
Havoc Pennington committed
1658 1659 1660 1661 1662 1663 1664 1665

      goto cleanup_and_fail;
    }
  else if (pid == 0)
    {
      /* Immediate child. This may or may not be the child that
       * actually execs the new process.
       */
1666 1667 1668 1669 1670 1671

      /* Reset some signal handlers that we may use */
      signal (SIGCHLD, SIG_DFL);
      signal (SIGINT, SIG_DFL);
      signal (SIGTERM, SIG_DFL);
      signal (SIGHUP, SIG_DFL);
Havoc Pennington's avatar
Havoc Pennington committed
1672 1673 1674 1675 1676 1677 1678 1679 1680 1681 1682 1683
      
      /* Be sure we crash if the parent exits
       * and we write to the err_report_pipe
       */
      signal (SIGPIPE, SIG_DFL);

      /* Close the parent's end of the pipes;
       * not needed in the close_descriptors case,
       * though
       */
      close_and_invalidate (&child_err_report_pipe[0]);
      close_and_invalidate (&child_pid_report_pipe[0]);
1684 1685 1686 1687 1688 1689
      if (child_close_fds != NULL)
        {
           int i = -1;
           while (child_close_fds[++i] != -1)
             close_and_invalidate (&child_close_fds[i]);
        }
Havoc Pennington's avatar
Havoc Pennington committed
1690 1691 1692 1693 1694 1695 1696 1697
      
      if (intermediate_child)
        {
          /* We need to fork an intermediate child that launches the
           * final child. The purpose of the intermediate child
           * is to exit, so we can waitpid() it immediately.
           * Then the grandchild will not become a zombie.
           */
Owen Taylor's avatar
Owen Taylor committed
1698
          GPid grandchild_pid;
Havoc Pennington's avatar
Havoc Pennington committed
1699

1700
          grandchild_pid = fork ();
Havoc Pennington's avatar
Havoc Pennington committed
1701 1702 1703 1704

          if (grandchild_pid < 0)
            {
              /* report -1 as child PID */
1705 1706
              write_all (child_pid_report_pipe[1], &grandchild_pid,
                         sizeof(grandchild_pid));
Havoc Pennington's avatar
Havoc Pennington committed
1707 1708 1709 1710 1711 1712
              
              write_err_and_exit (child_err_report_pipe[1],
                                  CHILD_FORK_FAILED);              
            }
          else if (grandchild_pid == 0)
            {
1713
              close_and_invalidate (&child_pid_report_pipe[1]);
Havoc Pennington's avatar
Havoc Pennington committed
1714
              do_exec (child_err_report_pipe[1],
1715 1716 1717
                       stdin_fd,
                       stdout_fd,
                       stderr_fd,
Havoc Pennington's avatar
Havoc Pennington committed
1718 1719 1720 1721 1722
                       working_directory,
                       argv,
                       envp,
                       close_descriptors,
                       search_path,
1723
                       search_path_from_envp,
Havoc Pennington's avatar
Havoc Pennington committed
1724 1725 1726
                       stdout_to_null,
                       stderr_to_null,
                       child_inherits_stdin,
1727
                       file_and_argv_zero,
Havoc Pennington's avatar
Havoc Pennington committed
1728 1729 1730 1731 1732
                       child_setup,
                       user_data);
            }
          else
            {
1733
              write_all (child_pid_report_pipe[1], &grandchild_pid, sizeof(grandchild_pid));
Havoc Pennington's avatar
Havoc Pennington committed
1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744
              close_and_invalidate (&child_pid_report_pipe[1]);
              
              _exit (0);
            }
        }
      else
        {
          /* Just run the child.
           */

          do_exec (child_err_report_pipe[1],
1745 1746 1747
                   stdin_fd,
                   stdout_fd,
                   stderr_fd,
Havoc Pennington's avatar
Havoc Pennington committed
1748 1749 1750 1751 1752
                   working_directory,
                   argv,
                   envp,
                   close_descriptors,
                   search_path,
1753
                   search_path_from_envp,
Havoc Pennington's avatar
Havoc Pennington committed
1754 1755 1756
                   stdout_to_null,
                   stderr_to_null,
                   child_inherits_stdin,
1757
                   file_and_argv_zero,
Havoc Pennington's avatar
Havoc Pennington committed
1758 1759 1760 1761 1762 1763 1764 1765 1766
                   child_setup,
                   user_data);
        }
    }
  else
    {
      /* Parent */
      
      gint buf[2];
1767
      gint n_ints = 0;    
Havoc Pennington's avatar
Havoc Pennington committed
1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783

      /* Close the uncared-about ends of the pipes */
      close_and_invalidate (&child_err_report_pipe[1]);
      close_and_invalidate (&child_pid_report_pipe[1]);

      /* If we had an intermediate child, reap it */
      if (intermediate_child)
        {
        wait_again:
          if (waitpid (pid, &status, 0) < 0)
            {
              if (errno == EINTR)
                goto wait_again;
              else if (errno == ECHILD)
                ; /* do nothing, child already reaped */
              else
1784 1785
                g_warning ("waitpid() should not fail in "
			   "'fork_exec_with_pipes'");
Havoc Pennington's avatar
Havoc Pennington committed
1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804
            }
        }
      

      if (!read_ints (child_err_report_pipe[0],
                      buf, 2, &n_ints,
                      error))
        goto cleanup_and_fail;
        
      if (n_ints >= 2)
        {
          /* Error from the child. */

          switch (buf[0])
            {
            case CHILD_CHDIR_FAILED:
              g_set_error (error,
                           G_SPAWN_ERROR,
                           G_SPAWN_ERROR_CHDIR,
1805
                           _("Failed to change to directory “%s” (%s)"),
Havoc Pennington's avatar
Havoc Pennington committed
1806 1807 1808 1809 1810 1811 1812 1813
                           working_directory,
                           g_strerror (buf[1]));

              break;
              
            case CHILD_EXEC_FAILED:
              g_set_error (error,
                           G_SPAWN_ERROR,
1814
                           _g_spawn_exec_err_to_g_error (buf[1]),
1815
                           _("Failed to execute child process “%s” (%s)"),
1816
                           argv[0],
Havoc Pennington's avatar
Havoc Pennington committed
1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 1836 1837 1838 1839 1840 1841
                           g_strerror (buf[1]));

              break;
              
            case CHILD_DUP2_FAILED:
              g_set_error (error,
                           G_SPAWN_ERROR,
                           G_SPAWN_ERROR_FAILED,
                           _("Failed to redirect output or input of child process (%s)"),
                           g_strerror (buf[1]));

              break;

            case CHILD_FORK_FAILED:
              g_set_error (error,
                           G_SPAWN_ERROR,
                           G_SPAWN_ERROR_FORK,
                           _("Failed to fork child process (%s)"),
                           g_strerror (buf[1]));
              break;
              
            default:
              g_set_error (error,
                           G_SPAWN_ERROR,
                           G_SPAWN_ERROR_FAILED,
1842
                           _("Unknown error executing child process “%s”"),
1843
                           argv[0]);
Havoc Pennington's avatar
Havoc Pennington committed
1844 1845 1846 1847 1848 1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860
              break;
            }

          goto cleanup_and_fail;
        }

      /* Get child pid from intermediate child pipe. */
      if (intermediate_child)
        {
          n_ints = 0;
          
          if (!read_ints (child_pid_report_pipe[0],
                          buf, 1, &n_ints, error))
            goto cleanup_and_fail;

          if (n_ints < 1)
            {
Christian Persch's avatar
Christian Persch committed
1861 1862
              int errsv = errno;

Havoc Pennington's avatar
Havoc Pennington committed
1863 1864 1865 1866
              g_set_error (error,
                           G_SPAWN_ERROR,
                           G_SPAWN_ERROR_FAILED,
                           _("Failed to read enough data from child pid pipe (%s)"),
Christian Persch's avatar
Christian Persch committed
1867
                           g_strerror (errsv));
Havoc Pennington's avatar
Havoc Pennington committed
1868 1869 1870 1871 1872 1873 1874 1875 1876 1877
              goto cleanup_and_fail;
            }
          else
            {
              /* we have the child pid */
              pid = buf[0];
            }
        }
      
      /* Success against all odds! return the information */
1878 1879 1880
      close_and_invalidate (&child_err_report_pipe[0]);
      close_and_invalidate (&child_pid_report_pipe[0]);
 
Havoc Pennington's avatar
Havoc Pennington committed
1881 1882 1883 1884 1885 1886 1887
      if (child_pid)
        *child_pid = pid;

      return TRUE;
    }

 cleanup_and_fail:
1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899 1900 1901 1902 1903 1904 1905 1906 1907

  /* There was an error from the Child, reap the child to avoid it being
     a zombie.
   */

  if (pid > 0)
  {
    wait_failed:
     if (waitpid (pid, NULL, 0) < 0)
       {
          if (errno == EINTR)
            goto wait_failed;
          else if (errno == ECHILD)
            ; /* do nothing, child already reaped */
          else
            g_warning ("waitpid() should not fail in "
                       "'fork_exec_with_pipes'");
       }
   }

Havoc Pennington's avatar
Havoc Pennington committed
1908 1909 1910 1911
  close_and_invalidate (&child_err_report_pipe[0]);
  close_and_invalidate (&child_err_report_pipe[1]);
  close_and_invalidate (&child_pid_report_pipe[0]);
  close_and_invalidate (&child_pid_report_pipe[1]);
1912 1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936 1937 1938 1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 1979 1980 1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997

  return FALSE;
}

static gboolean
fork_exec_with_pipes (gboolean              intermediate_child,
                      const gchar          *working_directory,
                      gchar               **argv,
                      gchar               **envp,
                      gboolean              close_descriptors,
                      gboolean              search_path,
                      gboolean              search_path_from_envp,
                      gboolean              stdout_to_null,
                      gboolean              stderr_to_null,
                      gboolean              child_inherits_stdin,
                      gboolean              file_and_argv_zero,
                      gboolean              cloexec_pipes,
                      GSpawnChildSetupFunc  child_setup,
                      gpointer              user_data,
                      GPid                 *child_pid,
                      gint                 *standard_input,
                      gint                 *standard_output,
                      gint                 *standard_error,
                      GError              **error)
{
  guint pipe_flags = cloexec_pipes ? FD_CLOEXEC : 0;
  gint stdin_pipe[2] = { -1, -1 };
  gint stdout_pipe[2] = { -1, -1 };
  gint stderr_pipe[2] = { -1, -1 };
  gint child_close_fds[4];
  gboolean ret;

  if (standard_input && !g_unix_open_pipe (stdin_pipe, pipe_flags, error))
    goto cleanup_and_fail;

  if (standard_output && !g_unix_open_pipe (stdout_pipe, pipe_flags, error))
    goto