/**
 * mds — A micro-display server
 * Copyright © 2014, 2015, 2016, 2017  Mattias Andrée (m@maandree.se)
 * 
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 * 
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 * 
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
#include "mds-base.h"

#include <libmdsserver/config.h>
#include <libmdsserver/macros.h>
#include <libmdsserver/util.h>

#include <stdint.h>
#include <stdlib.h>
#include <string.h>
#include <limits.h>
#include <stdio.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <sys/un.h>
#include <sys/mman.h>
#include <unistd.h>
#include <signal.h>
#include <pthread.h>
#include <fcntl.h>


/**
 * Number of elements in `argv`
 */
int argc = 0;

/**
 * Command line arguments
 */
char **argv = NULL;

/**
 * Whether the server has been respawn
 * rather than this being the initial spawn.
 * This will be at least as true as `is_reexec`.
 */
int is_respawn = -1;

/**
 * Whether the server is continuing
 * from a self-reexecution
 */
int is_reexec = 0;

/**
 * Whether the server should do its
 * best to resist event triggered death
 */
int is_immortal = 0;

/**
 * Whether to fork the process when the
 * server has been properly initialised
 */
int on_init_fork = 0;

/**
 * Command the run (`NULL` for none) when
 * the server has been properly initialised
 */
char *on_init_sh = NULL;

/**
 * The thread that runs the master loop
 */
pthread_t master_thread;


/**
 * Whether the server has been signaled to terminate
 */
volatile sig_atomic_t terminating = 0;

/**
 * Whether the server has been signaled to re-exec
 */
volatile sig_atomic_t reexecing = 0;

/**
 * Whether the server has been signaled to free unneeded memory
 */
volatile sig_atomic_t danger = 0;


/**
 * The file descriptor of the socket
 * that is connected to the server
 */
int socket_fd = -1;



/**
 * Parse command line arguments
 * 
 * @return  Non-zero on error
 */
int __attribute__((weak))
parse_cmdline(void)
{
	int i, v;
	char *arg;

#if (LIBEXEC_ARGC_EXTRA_LIMIT < 2)
# error LIBEXEC_ARGC_EXTRA_LIMIT is too small, need at least 2.
#endif

	/* Parse command line arguments. */
	for (i = 1; i < argc; i++) {
		arg = argv[i];
		if ((v = streq(arg, "--initial-spawn")) || /* Initial spawn? */
		    streq(arg, "--respawn")) {             /* Respawning after crash? */
			exit_if (is_respawn == v,
			         eprintf("conflicting arguments %s and %s cannot be combined.",
			                 "--initial-spawn", "--respawn"););
			is_respawn = !v;
		} else if (streq(arg, "--re-exec")) { /* Re-exec state-marshal. */
			is_reexec = 1;
		} else if (strstarts(arg, "--alarm=")) { /* Schedule an alarm signal for forced abort. */
			alarm(MIN(atou(arg + strlen("--alarm=")), 60)); /* At most 1 minute. */
		} else if (streq(arg, "--on-init-fork")) { /* Fork process when initialised. */
			on_init_fork = 1;
		} else if (strstarts(arg, "--on-init-sh=")) { /* Run a command when initialised. */
			on_init_sh = arg + strlen("--on-init-sh=");
		} else if (streq(arg, "--immortal")) { /* I return to serve. */
			is_immortal = 1;
		}
	}
	if (is_reexec) {
		is_respawn = 1;
		eprint("re-exec performed.");
	}

	/* Check that mandatory arguments have been specified. */
	if (server_characteristics.require_respawn_info)
		exit_if (is_respawn < 0,
		          eprintf("missing state argument, require either %s or %s.",
		                  "--initial-spawn", "--respawn"););
	return 0;
}


/**
 * Connect to the display
 * 
 * @return  Non-zero on error
 */
int __attribute__((weak))
connect_to_display(void)
{
	char *display;
	char pathname[PATH_MAX];
	struct sockaddr_un address;

	display = getenv("MDS_DISPLAY");
	exit_if (!display || !strchr(display, ':'),
	         eprint("MDS_DISPLAY has not set."););
	exit_if (display[0] != ':',
	         eprint("remote mds sessions are not supported."););
	xsnprintf(pathname, "%s/%s.socket", MDS_RUNTIME_ROOT_DIRECTORY, display + 1);
	address.sun_family = AF_UNIX;
	strcpy(address.sun_path, pathname);
	fail_if ((socket_fd = socket(PF_UNIX, SOCK_STREAM, 0)) < 0);
	fail_if (connect(socket_fd, (struct sockaddr*)(&address), sizeof(address)) < 0);

	return 0;

fail:
	xperror(*argv);
	if (socket_fd >= 0)
		xclose(socket_fd);
	return 1;
}


/**
 * Put the server into a fork of itself as
 * described by the `fork_for_safety`
 * server characteristics
 * 
 * @return  Zero on success, -1 on error
 */
static int server_initialised_fork_for_safety(void)
{
	unsigned pending_alarm = alarm(0); /* Disable the alarm. */
	pid_t pid = fork();
	int status;

	fail_if (pid == (pid_t)-1);
	if (!pid) {
		/* Reinstate the alarm for the child. */
		alarm(pending_alarm);
	} else {
		/* SIGDANGER cannot hurt the parent process. */
		if (xsigaction(SIGDANGER, SIG_IGN) < 0) {
			xperror(*argv);
			eprint("WARNING! parent process failed to sig up ignoring of SIGDANGER.");
		}

		/* Wait for the child process to die. */
		if (uninterruptable_waitpid(pid, &status, 0) == (pid_t)-1) {
			xperror(*argv);
			kill(pid, SIGABRT);
			sleep(5);
		}

		/* Clean up after us. */
		fork_cleanup(status);

		/* Die like the child. */
		if (WIFEXITED(status))
			exit(WEXITSTATUS(status));
		else if (WIFSIGNALED(status))
			raise(WTERMSIG(status));
		exit(1);
	}

	return 0;
fail:
	xperror(*argv);
	eprint("while forking for safety.");
	return -1;
}


/**
 * This function should be called when the server has
 * been properly initialised but before initialisation
 * of anything that is removed at forking is initialised
 * 
 * @return  Zero on success, -1 on error
 */
int __attribute__((weak))
server_initialised(void)
{
	pid_t r;
	int saved_errno;

	if (on_init_fork && (r = fork())) {
		fail_if (r == (pid_t)-1);
		exit(0);
	}

	if (on_init_sh) {
		if (system(on_init_sh) == -1) {
			saved_errno = errno;
			if (system(NULL)) {
				errno = 0;
				eprint("no shell is available.");
				return -1;
			} else {
				errno = saved_errno;
				xperror(*argv);
				eprint("while running shell at completed initialisation.");
				return -1;
			}
		}
	}

	if (server_characteristics.fork_for_safety)
		return server_initialised_fork_for_safety();

	return 0;
fail:
	xperror(*argv);
	eprint("while forking at completed initialisation.");
	return -1;
}


#if defined(__GNUC__)
# pragma GCC diagnostic push
# pragma GCC diagnostic ignored "-Wsuggest-attribute=const"
#endif
/**
 * This function should be implemented by the actual server implementation
 * if the server is multi-threaded
 * 
 * Send a singal to all threads except the current thread
 * 
 * @param  signo  The signal
 */
void __attribute__((weak))
signal_all(int signo)
{
	(void) signo;
}
#if defined(__GNUC__)
# pragma GCC diagnostic pop
#endif


/**
 * This function is called when an intraprocess signal
 * that used to send a notification to a thread
 * 
 * @param  signo  The signal that has been received
 */
static void __attribute__((const))
received_noop(int signo)
{
	(void) signo;
	/* This function is used rather than `SIG_IGN` because we
	 * want blocking functions to return with `errno` set to
	 * `EINTR` rather than continue blocking. */
}


/**
 * This function is called when a signal that
 * signals the server to re-exec has been received
 * 
 * When this function is invoked, it should set `reexecing` and
 * `terminating` to a non-zero value
 * 
 * @param  signo  The signal that has been received
 */
void __attribute__((weak))
received_reexec(int signo)
{
	SIGHANDLER_START;
	if (!reexecing) {
		reexecing = terminating = 1;
		eprint("re-exec signal received.");
		signal_all(signo);
	}
	SIGHANDLER_END;
	(void) signo;
}


/**
 * This function is called when a signal that
 * signals the server to terminate has been received
 * 
 * When this function is invoked, it should set `terminating` to a non-zero value
 * 
 * @param  signo  The signal that has been received
 */
void __attribute__((weak))
received_terminate(int signo)
{
	SIGHANDLER_START;
	if (!terminating) {
		terminating = 1;
		eprint("terminate signal received.");
		signal_all(signo);
	}
	SIGHANDLER_END;
	(void) signo;
}


/**
 * This function is called when a signal that
 * signals that the system is running out of memory
 * has been received
 * 
 * When this function is invoked, it should set `danger` to a non-zero value
 * 
 * @param  signo  The signal that has been received
 */
void __attribute__((weak))
received_danger(int signo)
{
	SIGHANDLER_START;
	if (!danger) {
		danger = 1;
		eprint("danger signal received.");
	}
	SIGHANDLER_END;
	(void) signo;
}


/**
 * This function is called when a signal that
 * signals that the system to dump state information
 * and statistics has been received
 * 
 * @param  signo  The signal that has been received
 */
#if defined(__GNUC__)
# pragma GCC diagnostic push
# pragma GCC diagnostic ignored "-Wsuggest-attribute=const"
#endif
void __attribute__((weak))
received_info(int signo)
{
	(void) signo;
}
#if defined(__GNUC__)
# pragma GCC diagnostic pop
#endif


/**
 * Unmarshal the server's saved state
 * 
 * @return  Non-zero on error
 */
static int
base_unmarshal(void)
{
	pid_t pid = getpid();
	int reexec_fd, r;
	char shm_path[NAME_MAX + 1];
	char *state_buf;
	char *state_buf_;

	/* Acquire access to marshalled data. */
	xsnprintf(shm_path, SHM_PATH_PATTERN, (intmax_t)pid);
	reexec_fd = shm_open(shm_path, O_RDONLY, S_IRWXU);
	fail_if (reexec_fd < 0); /* Critical. */

	/* Read the state file. */
	fail_if (!(state_buf = state_buf_ = full_read(reexec_fd, NULL)));

	/* Release resources. */
	xclose(reexec_fd);
	shm_unlink(shm_path);


	/* Unmarshal state. */

	/* Get the marshal protocal version. Not needed, there is only the one version right now. */
	/* buf_get(state_buf_, int, 0, MDS_BASE_VARS_VERSION); */
	buf_next(state_buf_, int, 1);

	buf_get_next(state_buf_, int, socket_fd);
	r = unmarshal_server(state_buf_);


	/* Release resources. */
	free(state_buf);

	/* Recover after failure. */
	fail_if (r && reexec_failure_recover());

	return 0;
fail:
	xperror(*argv);
	return 1;
}


/**
 * Marshal the server's state
 * 
 * @param   reexec_fd  The file descriptor of the file into which the state shall be saved
 * @return             Non-zero on error
 */
static int
base_marshal(int reexec_fd)
{
	size_t state_n;
	char *state_buf;
	char *state_buf_;

	/* Calculate the size of the state data when it is marshalled. */
	state_n = 2 * sizeof(int);
	state_n += marshal_server_size();

	/* Allocate a buffer for all data. */
	fail_if (xbmalloc(state_buf = state_buf_, state_n));


	/* Marshal the state of the server. */

	/* Tell the new version of the program what version of the program it is marshalling. */
	buf_set_next(state_buf_, int, MDS_BASE_VARS_VERSION);

	/* Store the state. */
	buf_set_next(state_buf_, int, socket_fd);
	fail_if (marshal_server(state_buf_));


	/* Send the marshalled data into the file. */
	fail_if (full_write(reexec_fd, state_buf, state_n) < 0);

	free(state_buf);
	return 0;

fail:
	xperror(*argv);
	free(state_buf);
	return 1;
}


/**
 * Marshal and re-execute the server
 * 
 * This function only returns on error,
 * in which case the error will have been printed.
 */
static void
perform_reexec(void)
{
	pid_t pid = getpid();
	int reexec_fd;
	char shm_path[NAME_MAX + 1];

	/* Marshal the state of the server. */
	xsnprintf(shm_path, SHM_PATH_PATTERN, (unsigned long int)pid);
	reexec_fd = shm_open(shm_path, O_RDWR | O_CREAT | O_EXCL, S_IRWXU);
	fail_if (reexec_fd < 0);
	fail_if (base_marshal(reexec_fd) < 0);
	xclose(reexec_fd);
	reexec_fd = -1;

	/* Re-exec the server. */
	reexec_server(argc, argv, is_reexec);

fail:
	xperror(*argv);
	if (reexec_fd >= 0) {
		xclose(reexec_fd);
		shm_unlink(shm_path);
	}
}


/**
 * Entry point of the server
 * 
 * @param   argc_  Number of elements in `argv_`
 * @param   argv_  Command line arguments
 * @return         Non-zero on error
 */
int
main(int argc_, char **argv_)
{
	argc = argc_;
	argv = argv_;


	if (!server_characteristics.require_privileges)
		/* Drop privileges like it's hot. */
		if (drop_privileges())
			fail_if (1);


	/* Use /proc/self/exe when re:exec-ing */
	if (prepare_reexec())
		xperror(*argv);


	/* Sanity check the number of command line arguments. */
	exit_if (argc > ARGC_LIMIT + LIBEXEC_ARGC_EXTRA_LIMIT,
	         eprint("that number of arguments is ridiculous, I will not allow it."););

	/* Parse command line arguments. */
	fail_if (parse_cmdline());


	/* Store the current thread so it can be killed from elsewhere. */
	master_thread = pthread_self();

	/* Set up signal traps for all especially handled signals. */
	trap_signals();


	/* Initialise the server. */
	fail_if (preinitialise_server());

	if (!is_reexec) {
		if (server_characteristics.require_display)
			/* Connect to the display. */
			fail_if (connect_to_display());

		/* Initialise the server. */
		fail_if (initialise_server());
	} else {
		/* Unmarshal the server's saved state. */
		fail_if (base_unmarshal());
	}

	/* Initialise the server. */
	fail_if (postinitialise_server());


	/* Run the server. */
	fail_if (master_loop());


	/* Re-exec server if signal to re-exec. */
	if (reexecing) {
		perform_reexec();
		fail_if (1);
	}

	xclose(socket_fd);
	return 0;


fail:
	xperror(*argv);
	if (socket_fd >= 0)
		xclose(socket_fd);
	return 1;
}


/**
 * This function is called when `SIGDANGER` is received
 * of `server_characteristics.danger_is_deadly` is non-zero
 * unless the signal handler for `SIGDANGER` has been
 * modified by the server implementation.
 * 
 * This function will abruptly kill the process
 * 
 * @param  signo  The signal that has been received
 */
static void
commit_suicide(int signo)
{
	eprint("SIGDANGER received, process is killing itself to free memory.");

	/* abort(), but on the process rather than the thread. */
	xsigaction(SIGABRT, SIG_DFL);
	kill(getpid(), SIGABRT);

	/* Just in case. */
	xperror(*argv);
	_exit(1);

	(void) signo;
}


/**
 * Set up signal traps for all especially handled signals
 * 
 * @return  Non-zero on error
 */
int
trap_signals(void)
{
	/* Make the server update without all slaves dying on SIGUPDATE. */
	fail_if (xsigaction(SIGUPDATE, received_reexec) < 0);

	/* Implement clean exit on SIGTERM. */
	fail_if (xsigaction(SIGTERM, received_terminate) < 0);

	/* Implement clean exit on SIGINT. */
	fail_if (xsigaction(SIGINT, received_terminate) < 0);

	/* Implement silent interruption on SIGRTMIN. */
	fail_if (xsigaction(SIGRTMIN, received_noop) < 0);

	/* Implement death on SIGDANGER or ignoral of SIGDANGER. */
	if (server_characteristics.danger_is_deadly && !is_immortal)
		fail_if (xsigaction(SIGDANGER, commit_suicide) < 0);
	else
		fail_if (xsigaction(SIGDANGER, received_danger) < 0);

	/* Implement support of SIGINFO. */
	fail_if (xsigaction(SIGINFO, received_info) < 0);

	return 0;
fail:
	xperror(*argv);
	return 1;
}


/**
 * This function should be implemented by the actual server implementation
 * if the server has set `server_characteristics.fork_for_safety` to be
 * true
 * 
 * This function is called by the parent server process when the
 * child server process exits, if the server has completed its
 * initialisation
 * 
 * @param  status  The status the child died with
 */
void __attribute__((weak))
fork_cleanup(int status)
{
	fprintf(stderr, "Something is wrong, `fork_cleanup` has been called but not reimplemented.");
	(void) status;
}