/*
 * Copyright (c) 1982, 1986, 1989 Regents of the University of California.
 * All rights reserved.
 *
 * %sccs.include.redist.c%
 *
 *	@(#)kern_fork.c	7.25 (Berkeley) 03/17/91
 */

#include "param.h"
#include "systm.h"
#include "map.h"
#include "filedesc.h"
#include "kernel.h"
#include "malloc.h"
#include "proc.h"
#include "resourcevar.h"
#include "vnode.h"
#include "seg.h"
#include "file.h"
#include "acct.h"
#include "ktrace.h"

/* ARGSUSED */
fork(p, uap, retval)
	struct proc *p;
	struct args *uap;
	int retval[];
{

	return (fork1(p, 0, retval));
}

/* ARGSUSED */
vfork(p, uap, retval)
	struct proc *p;
	struct args *uap;
	int retval[];
{

	return (fork1(p, 1, retval));
}

int	nprocs = 1;		/* process 0 */

fork1(p1, isvfork, retval)
	register struct proc *p1;
	int isvfork, retval[];
{
	register struct proc *p2;
	register int count, uid;
	static int nextpid, pidchecked = 0;

	count = 0;
	if ((uid = p1->p_ucred->cr_uid) != 0) {
		for (p2 = allproc; p2; p2 = p2->p_nxt)
			if (p2->p_ucred->cr_uid == uid)
				count++;
		for (p2 = zombproc; p2; p2 = p2->p_nxt)
			if (p2->p_ucred->cr_uid == uid)
				count++;
	}
	/*
	 * Although process entries are dynamically entries,
	 * we still keep a global limit on the maximum number
	 * we will create.  Don't allow a nonprivileged user
	 * to exceed its current limit or to bring us within one
	 * of the global limit; don't let root exceed the limit.
	 * nprocs is the current number of processes,
	 * maxproc is the limit.
	 */
	retval[1] = 0;
	if (nprocs >= maxproc || uid == 0 && nprocs >= maxproc + 1) {
		tablefull("proc");
		return (EAGAIN);
	}
	if (count > p1->p_rlimit[RLIMIT_NPROC].rlim_cur)
		return (EAGAIN);

	/*
	 * Find an unused process ID.
	 * We remember a range of unused IDs ready to use
	 * (from nextpid+1 through pidchecked-1).
	 */
	nextpid++;
retry:
	/*
	 * If the process ID prototype has wrapped around,
	 * restart somewhat above 0, as the low-numbered procs
	 * tend to include daemons that don't exit.
	 */
	if (nextpid >= PID_MAX) {
		nextpid = 100;
		pidchecked = 0;
	}
	if (nextpid >= pidchecked) {
		int doingzomb = 0;

		pidchecked = PID_MAX;
		/*
		 * Scan the active and zombie procs to check whether this pid
		 * is in use.  Remember the lowest pid that's greater
		 * than nextpid, so we can avoid checking for a while.
		 */
		p2 = allproc;
again:
		for (; p2 != NULL; p2 = p2->p_nxt) {
			if (p2->p_pid == nextpid ||
			    p2->p_pgrp->pg_id == nextpid) {
				nextpid++;
				if (nextpid >= pidchecked)
					goto retry;
			}
			if (p2->p_pid > nextpid && pidchecked > p2->p_pid)
				pidchecked = p2->p_pid;
			if (p2->p_pgrp->pg_id > nextpid && 
			    pidchecked > p2->p_pgrp->pg_id)
				pidchecked = p2->p_pgrp->pg_id;
		}
		if (!doingzomb) {
			doingzomb = 1;
			p2 = zombproc;
			goto again;
		}
	}


	/*
	 * Allocate new proc.
	 * Link onto allproc (this should probably be delayed).
	 */
	MALLOC(p2, struct proc *, sizeof(struct proc), M_PROC, M_WAITOK);
	nprocs++;
	p2->p_nxt = allproc;
	p2->p_nxt->p_prev = &p2->p_nxt;		/* allproc is never NULL */
	p2->p_prev = &allproc;
	allproc = p2;
	p2->p_link = NULL;			/* shouldn't be necessary */
	p2->p_rlink = NULL;			/* shouldn't be necessary */

	/*
	 * Make a proc table entry for the new process.
	 * Start by zeroing the section of proc that is zero-initialized,
	 * then copy the section that is copied directly from the parent.
	 */
	bzero(&p2->p_startzero,
	    (unsigned) ((caddr_t)&p2->p_endzero - (caddr_t)&p2->p_startzero));
	bcopy(&p1->p_startcopy, &p2->p_startcopy,
	    (unsigned) ((caddr_t)&p2->p_endcopy - (caddr_t)&p2->p_startcopy));

	/*
	 * Duplicate sub-structures as needed.
	 * Increase reference counts on shared objects.
	 */
	MALLOC(p2->p_cred, struct pcred *, sizeof(struct pcred),
	    M_SUBPROC, M_WAITOK);
	bcopy(p1->p_cred, p2->p_cred, sizeof(*p2->p_cred));
	crhold(p1->p_ucred);

	p2->p_fd = fdcopy(p1);
	p2->p_stats = p1->p_stats;		/* XXX move; in u. */
	/*
	 * If p_limit is still copy-on-write, bump refcnt,
	 * otherwise get a copy that won't be modified.
	 * (If PL_SHAREMOD is clear, the structure is shared
	 * copy-on-write.)
	 */
	if (p1->p_limit->p_lflags & PL_SHAREMOD)
		p2->p_limit = limcopy(p1->p_limit);
	else {
		p2->p_limit = p1->p_limit;
		p2->p_limit->p_refcnt++;
	}
	p2->p_sigacts = p1->p_sigacts;		/* XXX move; in u. */

	p2->p_flag = SLOAD | (p1->p_flag & (SPAGV|SHPUX));
	if (p1->p_session->s_ttyvp != NULL && p1->p_flag & SCTTY)
		p2->p_flag |= SCTTY;
	if (isvfork)
		p2->p_flag |= SPPWAIT;
	p2->p_stat = SIDL;
	p2->p_pid = nextpid;
	{
	struct proc **hash = &pidhash[PIDHASH(p2->p_pid)];

	p2->p_hash = *hash;
	*hash = p2;
	}
	p2->p_pgrpnxt = p1->p_pgrpnxt;
	p1->p_pgrpnxt = p2;
	p2->p_pptr = p1;
	p2->p_osptr = p1->p_cptr;
	if (p1->p_cptr)
		p1->p_cptr->p_ysptr = p2;
	p1->p_cptr = p2;
#ifdef KTRACE
	/*
	 * Copy traceflag and tracefile if enabled.
	 * If not inherited, these were zeroed above.
	 */
	if (p1->p_traceflag&KTRFAC_INHERIT) {
		p2->p_traceflag = p1->p_traceflag;
		if ((p2->p_tracep = p1->p_tracep) != NULL)
			VREF(p2->p_tracep);
	}
#endif

	p2->p_regs = p1->p_regs;		 /* XXX move this */
#if defined(tahoe)
	p2->p_vmspace->p_ckey = p1->p_vmspace->p_ckey; /* XXX move this */
#endif

	/*
	 * This begins the section where we must prevent the parent
	 * from being swapped.
	 */
	p1->p_flag |= SKEEP;
	if (vm_fork(p1, p2, isvfork)) {
		/*
		 * Child process.  Set start time, return parent pid,
		 * and mark as child in retval[1].
		 */
		(void) splclock();
		p2->p_stats->p_start = time;
		(void) spl0();
		retval[0] = p1->p_pid;
		retval[1] = 1;
		p2->p_acflag = AFORK;
		return (0);
	}

	/*
	 * Make child runnable and add to run queue.
	 */
	(void) splhigh();
	p2->p_stat = SRUN;
	setrq(p2);
	(void) spl0();

	/*
	 * Now can be swapped.
	 */
	p1->p_flag &= ~SKEEP;

	/*
	 * XXX preserve synchronization semantics of vfork
	 * If waiting for child to exec or exit, set SPPWAIT
	 * on child, and sleep on our proc (in case of exit).
	 */
	if (isvfork)
		while (p2->p_flag & SPPWAIT)
			sleep((caddr_t)p1, PZERO - 1);

	/*
	 * Return child pid to parent process.
	 * retval[1] was set above.
	 */
	retval[0] = p2->p_pid;
	return (0);
}