networking.c 56.8 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
/*
 * Copyright (c) 2009-2012, Salvatore Sanfilippo <antirez at gmail dot com>
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are met:
 *
 *   * Redistributions of source code must retain the above copyright notice,
 *     this list of conditions and the following disclaimer.
 *   * Redistributions in binary form must reproduce the above copyright
 *     notice, this list of conditions and the following disclaimer in the
 *     documentation and/or other materials provided with the distribution.
 *   * Neither the name of Redis nor the names of its contributors may be used
 *     to endorse or promote products derived from this software without
 *     specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 */

30 31
#include "redis.h"
#include <sys/uio.h>
32
#include <math.h>
33

34 35
static void setProtocolError(redisClient *c, int pos);

36 37 38 39 40 41 42 43
/* To evaluate the output buffer size of a client we need to get size of
 * allocated objects, however we can't used zmalloc_size() directly on sds
 * strings because of the trick they use to work (the header is before the
 * returned pointer), so we use this helper function. */
size_t zmalloc_size_sds(sds s) {
    return zmalloc_size(s-sizeof(struct sdshdr));
}

44 45 46 47 48 49 50 51 52 53 54
/* Return the amount of memory used by the sds string at object->ptr
 * for a string object. */
size_t getStringObjectSdsUsedMemory(robj *o) {
    redisAssertWithInfo(NULL,o,o->type == REDIS_STRING);
    switch(o->encoding) {
    case REDIS_ENCODING_RAW: return zmalloc_size_sds(o->ptr);
    case REDIS_ENCODING_EMBSTR: return sdslen(o->ptr);
    default: return 0; /* Just integer encoding for now. */
    }
}

55 56 57 58 59 60 61 62 63 64
void *dupClientReplyValue(void *o) {
    incrRefCount((robj*)o);
    return o;
}

int listMatchObjects(void *a, void *b) {
    return equalStringObjects(a,b);
}

redisClient *createClient(int fd) {
65
    redisClient *c = zmalloc(sizeof(redisClient));
66

67 68 69 70 71 72
    /* passing -1 as fd it is possible to create a non connected client.
     * This is useful since all the Redis commands needs to be executed
     * in the context of a client. When commands are executed in other
     * contexts (for instance a Lua script) we need a non connected client. */
    if (fd != -1) {
        anetNonBlock(NULL,fd);
73
        anetEnableTcpNoDelay(NULL,fd);
74 75
        if (server.tcpkeepalive)
            anetKeepAlive(NULL,fd,server.tcpkeepalive);
76 77 78 79 80 81 82
        if (aeCreateFileEvent(server.el,fd,AE_READABLE,
            readQueryFromClient, c) == AE_ERR)
        {
            close(fd);
            zfree(c);
            return NULL;
        }
83 84
    }

85 86
    selectDb(c,0);
    c->fd = fd;
87
    c->name = NULL;
88
    c->bufpos = 0;
89
    c->querybuf = sdsempty();
90
    c->querybuf_peak = 0;
91
    c->reqtype = 0;
92 93
    c->argc = 0;
    c->argv = NULL;
94
    c->cmd = c->lastcmd = NULL;
95
    c->multibulklen = 0;
96 97 98
    c->bulklen = -1;
    c->sentlen = 0;
    c->flags = 0;
99
    c->ctime = c->lastinteraction = server.unixtime;
100 101
    c->authenticated = 0;
    c->replstate = REDIS_REPL_NONE;
102
    c->reploff = 0;
A
antirez 已提交
103 104
    c->repl_ack_off = 0;
    c->repl_ack_time = 0;
A
antirez 已提交
105
    c->slave_listening_port = 0;
106
    c->reply = listCreate();
107
    c->reply_bytes = 0;
108
    c->obuf_soft_limit_reached_time = 0;
109
    listSetFreeMethod(c->reply,decrRefCountVoid);
110
    listSetDupMethod(c->reply,dupClientReplyValue);
111
    c->btype = REDIS_BLOCKED_NONE;
112
    c->bpop.timeout = 0;
113
    c->bpop.keys = dictCreate(&setDictType,NULL);
114
    c->bpop.target = NULL;
115 116
    c->bpop.numreplicas = 0;
    c->bpop.reploffset = 0;
117
    c->woff = 0;
118 119 120
    c->watched_keys = listCreate();
    c->pubsub_channels = dictCreate(&setDictType,NULL);
    c->pubsub_patterns = listCreate();
121
    listSetFreeMethod(c->pubsub_patterns,decrRefCountVoid);
122
    listSetMatchMethod(c->pubsub_patterns,listMatchObjects);
123
    if (fd != -1) listAddNodeTail(server.clients,c);
124 125 126 127
    initClientMultiState(c);
    return c;
}

128 129 130 131 132 133 134
/* This function is called every time we are going to transmit new data
 * to the client. The behavior is the following:
 *
 * If the client should receive new data (normal clients will) the function
 * returns REDIS_OK, and make sure to install the write handler in our event
 * loop so that when the socket is writable new data gets written.
 *
135 136
 * If the client should not receive new data, because it is a fake client,
 * a master, a slave not yet online, or because the setup of the write handler
137
 * failed, the function returns REDIS_ERR.
138 139 140 141 142
 *
 * Typically gets called every time a reply is built, before adding more
 * data to the clients output buffers. If the function returns REDIS_ERR no
 * data should be appended to the output buffers. */
int prepareClientToWrite(redisClient *c) {
143
    if (c->flags & REDIS_LUA_CLIENT) return REDIS_OK;
144 145
    if ((c->flags & REDIS_MASTER) &&
        !(c->flags & REDIS_MASTER_FORCE_REPLY)) return REDIS_ERR;
146
    if (c->fd <= 0) return REDIS_ERR; /* Fake client */
147
    if (c->bufpos == 0 && listLength(c->reply) == 0 &&
148 149 150
        (c->replstate == REDIS_REPL_NONE ||
         c->replstate == REDIS_REPL_ONLINE) &&
        aeCreateFileEvent(server.el, c->fd, AE_WRITABLE,
151 152 153 154
        sendReplyToClient, c) == AE_ERR) return REDIS_ERR;
    return REDIS_OK;
}

155 156 157 158 159 160 161 162 163 164 165 166 167 168
/* Create a duplicate of the last object in the reply list when
 * it is not exclusively owned by the reply list. */
robj *dupLastObjectIfNeeded(list *reply) {
    robj *new, *cur;
    listNode *ln;
    redisAssert(listLength(reply) > 0);
    ln = listLast(reply);
    cur = listNodeValue(ln);
    if (cur->refcount > 1) {
        new = dupStringObject(cur);
        decrRefCount(cur);
        listNodeValue(ln) = new;
    }
    return listNodeValue(ln);
169 170
}

171 172 173 174
/* -----------------------------------------------------------------------------
 * Low level functions to add more data to output buffers.
 * -------------------------------------------------------------------------- */

175
int _addReplyToBuffer(redisClient *c, char *s, size_t len) {
176
    size_t available = sizeof(c->buf)-c->bufpos;
177

178 179
    if (c->flags & REDIS_CLOSE_AFTER_REPLY) return REDIS_OK;

180 181 182 183 184 185
    /* If there already are entries in the reply list, we cannot
     * add anything more to the static buffer. */
    if (listLength(c->reply) > 0) return REDIS_ERR;

    /* Check that the buffer has enough space available for this string. */
    if (len > available) return REDIS_ERR;
186

187 188 189
    memcpy(c->buf+c->bufpos,s,len);
    c->bufpos+=len;
    return REDIS_OK;
190 191
}

192 193
void _addReplyObjectToList(redisClient *c, robj *o) {
    robj *tail;
194 195 196

    if (c->flags & REDIS_CLOSE_AFTER_REPLY) return;

197 198 199
    if (listLength(c->reply) == 0) {
        incrRefCount(o);
        listAddNodeTail(c->reply,o);
200
        c->reply_bytes += getStringObjectSdsUsedMemory(o);
201 202 203 204 205
    } else {
        tail = listNodeValue(listLast(c->reply));

        /* Append to this object when possible. */
        if (tail->ptr != NULL &&
206
            tail->encoding == REDIS_ENCODING_RAW &&
207 208
            sdslen(tail->ptr)+sdslen(o->ptr) <= REDIS_REPLY_CHUNK_BYTES)
        {
209
            c->reply_bytes -= zmalloc_size_sds(tail->ptr);
210 211
            tail = dupLastObjectIfNeeded(c->reply);
            tail->ptr = sdscatlen(tail->ptr,o->ptr,sdslen(o->ptr));
212
            c->reply_bytes += zmalloc_size_sds(tail->ptr);
213 214 215
        } else {
            incrRefCount(o);
            listAddNodeTail(c->reply,o);
216
            c->reply_bytes += getStringObjectSdsUsedMemory(o);
217 218
        }
    }
219
    asyncCloseClientOnOutputBufferLimitReached(c);
220
}
221

222 223 224 225
/* This method takes responsibility over the sds. When it is no longer
 * needed it will be free'd, otherwise it ends up in a robj. */
void _addReplySdsToList(redisClient *c, sds s) {
    robj *tail;
226

227 228 229 230
    if (c->flags & REDIS_CLOSE_AFTER_REPLY) {
        sdsfree(s);
        return;
    }
231

232 233
    if (listLength(c->reply) == 0) {
        listAddNodeTail(c->reply,createObject(REDIS_STRING,s));
234
        c->reply_bytes += zmalloc_size_sds(s);
235 236 237 238
    } else {
        tail = listNodeValue(listLast(c->reply));

        /* Append to this object when possible. */
239
        if (tail->ptr != NULL && tail->encoding == REDIS_ENCODING_RAW &&
240 241
            sdslen(tail->ptr)+sdslen(s) <= REDIS_REPLY_CHUNK_BYTES)
        {
242
            c->reply_bytes -= zmalloc_size_sds(tail->ptr);
243 244
            tail = dupLastObjectIfNeeded(c->reply);
            tail->ptr = sdscatlen(tail->ptr,s,sdslen(s));
245
            c->reply_bytes += zmalloc_size_sds(tail->ptr);
246
            sdsfree(s);
247
        } else {
248
            listAddNodeTail(c->reply,createObject(REDIS_STRING,s));
249
            c->reply_bytes += zmalloc_size_sds(s);
250
        }
251
    }
252
    asyncCloseClientOnOutputBufferLimitReached(c);
253 254 255 256
}

void _addReplyStringToList(redisClient *c, char *s, size_t len) {
    robj *tail;
257 258 259

    if (c->flags & REDIS_CLOSE_AFTER_REPLY) return;

260
    if (listLength(c->reply) == 0) {
261 262 263
        robj *o = createStringObject(s,len);

        listAddNodeTail(c->reply,o);
264
        c->reply_bytes += getStringObjectSdsUsedMemory(o);
265
    } else {
266 267 268
        tail = listNodeValue(listLast(c->reply));

        /* Append to this object when possible. */
269
        if (tail->ptr != NULL && tail->encoding == REDIS_ENCODING_RAW &&
270 271
            sdslen(tail->ptr)+len <= REDIS_REPLY_CHUNK_BYTES)
        {
272
            c->reply_bytes -= zmalloc_size_sds(tail->ptr);
273 274
            tail = dupLastObjectIfNeeded(c->reply);
            tail->ptr = sdscatlen(tail->ptr,s,len);
275
            c->reply_bytes += zmalloc_size_sds(tail->ptr);
276
        } else {
277 278 279
            robj *o = createStringObject(s,len);

            listAddNodeTail(c->reply,o);
280
            c->reply_bytes += getStringObjectSdsUsedMemory(o);
281 282
        }
    }
283
    asyncCloseClientOnOutputBufferLimitReached(c);
284
}
285

286 287 288 289 290
/* -----------------------------------------------------------------------------
 * Higher level functions to queue data on the client output buffer.
 * The following functions are the ones that commands implementations will call.
 * -------------------------------------------------------------------------- */

291
void addReply(redisClient *c, robj *obj) {
292
    if (prepareClientToWrite(c) != REDIS_OK) return;
293 294 295 296 297 298 299 300

    /* This is an important place where we can avoid copy-on-write
     * when there is a saving child running, avoiding touching the
     * refcount field of the object if it's not needed.
     *
     * If the encoding is RAW and there is room in the static buffer
     * we'll be able to send the object to the client without
     * messing with its page. */
301
    if (sdsEncodedObject(obj)) {
302 303
        if (_addReplyToBuffer(c,obj->ptr,sdslen(obj->ptr)) != REDIS_OK)
            _addReplyObjectToList(c,obj);
304 305 306 307 308 309 310 311 312 313 314 315 316 317
    } else if (obj->encoding == REDIS_ENCODING_INT) {
        /* Optimization: if there is room in the static buffer for 32 bytes
         * (more than the max chars a 64 bit integer can take as string) we
         * avoid decoding the object and go for the lower level approach. */
        if (listLength(c->reply) == 0 && (sizeof(c->buf) - c->bufpos) >= 32) {
            char buf[32];
            int len;

            len = ll2string(buf,sizeof(buf),(long)obj->ptr);
            if (_addReplyToBuffer(c,buf,len) == REDIS_OK)
                return;
            /* else... continue with the normal code path, but should never
             * happen actually since we verified there is room. */
        }
318
        obj = getDecodedObject(obj);
319 320 321
        if (_addReplyToBuffer(c,obj->ptr,sdslen(obj->ptr)) != REDIS_OK)
            _addReplyObjectToList(c,obj);
        decrRefCount(obj);
322 323
    } else {
        redisPanic("Wrong obj->encoding in addReply()");
324 325 326 327
    }
}

void addReplySds(redisClient *c, sds s) {
328
    if (prepareClientToWrite(c) != REDIS_OK) {
329 330 331 332
        /* The caller expects the sds to be free'd. */
        sdsfree(s);
        return;
    }
333
    if (_addReplyToBuffer(c,s,sdslen(s)) == REDIS_OK) {
334 335
        sdsfree(s);
    } else {
336 337
        /* This method free's the sds when it is no longer needed. */
        _addReplySdsToList(c,s);
338
    }
339 340
}

341
void addReplyString(redisClient *c, char *s, size_t len) {
342
    if (prepareClientToWrite(c) != REDIS_OK) return;
343 344
    if (_addReplyToBuffer(c,s,len) != REDIS_OK)
        _addReplyStringToList(c,s,len);
345
}
346

347
void addReplyErrorLength(redisClient *c, char *s, size_t len) {
348 349 350
    addReplyString(c,"-ERR ",5);
    addReplyString(c,s,len);
    addReplyString(c,"\r\n",2);
351 352
}

353
void addReplyError(redisClient *c, char *err) {
354
    addReplyErrorLength(c,err,strlen(err));
355
}
356

357
void addReplyErrorFormat(redisClient *c, const char *fmt, ...) {
358
    size_t l, j;
359 360 361 362
    va_list ap;
    va_start(ap,fmt);
    sds s = sdscatvprintf(sdsempty(),fmt,ap);
    va_end(ap);
363 364 365 366 367 368
    /* Make sure there are no newlines in the string, otherwise invalid protocol
     * is emitted. */
    l = sdslen(s);
    for (j = 0; j < l; j++) {
        if (s[j] == '\r' || s[j] == '\n') s[j] = ' ';
    }
369
    addReplyErrorLength(c,s,sdslen(s));
370 371 372
    sdsfree(s);
}

373
void addReplyStatusLength(redisClient *c, char *s, size_t len) {
374 375 376 377 378 379
    addReplyString(c,"+",1);
    addReplyString(c,s,len);
    addReplyString(c,"\r\n",2);
}

void addReplyStatus(redisClient *c, char *status) {
380
    addReplyStatusLength(c,status,strlen(status));
381 382 383 384 385 386 387
}

void addReplyStatusFormat(redisClient *c, const char *fmt, ...) {
    va_list ap;
    va_start(ap,fmt);
    sds s = sdscatvprintf(sdsempty(),fmt,ap);
    va_end(ap);
388
    addReplyStatusLength(c,s,sdslen(s));
389 390 391
    sdsfree(s);
}

392 393 394
/* Adds an empty object to the reply list that will contain the multi bulk
 * length, which is not known when this function is called. */
void *addDeferredMultiBulkLength(redisClient *c) {
395 396 397
    /* Note that we install the write event here even if the object is not
     * ready to be sent, since we are sure that before returning to the
     * event loop setDeferredMultiBulkLength() will be called. */
398
    if (prepareClientToWrite(c) != REDIS_OK) return NULL;
399
    listAddNodeTail(c->reply,createObject(REDIS_STRING,NULL));
400 401 402
    return listLast(c->reply);
}

G
guiquanz 已提交
403
/* Populate the length object and try gluing it to the next chunk. */
404 405 406 407 408 409 410 411 412
void setDeferredMultiBulkLength(redisClient *c, void *node, long length) {
    listNode *ln = (listNode*)node;
    robj *len, *next;

    /* Abort when *node is NULL (see addDeferredMultiBulkLength). */
    if (node == NULL) return;

    len = listNodeValue(ln);
    len->ptr = sdscatprintf(sdsempty(),"*%ld\r\n",length);
413
    len->encoding = REDIS_ENCODING_RAW; /* in case it was an EMBSTR. */
414
    c->reply_bytes += zmalloc_size_sds(len->ptr);
415 416
    if (ln->next != NULL) {
        next = listNodeValue(ln->next);
417

418
        /* Only glue when the next node is non-NULL (an sds in this case) */
419
        if (next->ptr != NULL) {
420
            c->reply_bytes -= zmalloc_size_sds(len->ptr);
421
            c->reply_bytes -= getStringObjectSdsUsedMemory(next);
422
            len->ptr = sdscatlen(len->ptr,next->ptr,sdslen(next->ptr));
423
            c->reply_bytes += zmalloc_size_sds(len->ptr);
424 425
            listDelNode(c->reply,ln->next);
        }
426
    }
427
    asyncCloseClientOnOutputBufferLimitReached(c);
428 429
}

G
guiquanz 已提交
430
/* Add a double as a bulk reply */
431 432 433
void addReplyDouble(redisClient *c, double d) {
    char dbuf[128], sbuf[128];
    int dlen, slen;
434 435 436 437 438 439 440 441 442
    if (isinf(d)) {
        /* Libc in odd systems (Hi Solaris!) will format infinite in a
         * different way, so better to handle it in an explicit way. */
        addReplyBulkCString(c, d > 0 ? "inf" : "-inf");
    } else {
        dlen = snprintf(dbuf,sizeof(dbuf),"%.17g",d);
        slen = snprintf(sbuf,sizeof(sbuf),"$%d\r\n%s\r\n",dlen,dbuf);
        addReplyString(c,sbuf,slen);
    }
443 444
}

445 446
/* Add a long long as integer reply or bulk len / multi bulk count.
 * Basically this is used to output <prefix><long long><crlf>. */
447
void addReplyLongLongWithPrefix(redisClient *c, long long ll, char prefix) {
448
    char buf[128];
449
    int len;
450 451 452 453 454 455 456 457 458 459 460 461

    /* Things like $3\r\n or *2\r\n are emitted very often by the protocol
     * so we have a few shared objects to use if the integer is small
     * like it is most of the times. */
    if (prefix == '*' && ll < REDIS_SHARED_BULKHDR_LEN) {
        addReply(c,shared.mbulkhdr[ll]);
        return;
    } else if (prefix == '$' && ll < REDIS_SHARED_BULKHDR_LEN) {
        addReply(c,shared.bulkhdr[ll]);
        return;
    }

462
    buf[0] = prefix;
463 464 465
    len = ll2string(buf+1,sizeof(buf)-1,ll);
    buf[len+1] = '\r';
    buf[len+2] = '\n';
466
    addReplyString(c,buf,len+3);
467 468
}

469
void addReplyLongLong(redisClient *c, long long ll) {
470 471 472 473 474
    if (ll == 0)
        addReply(c,shared.czero);
    else if (ll == 1)
        addReply(c,shared.cone);
    else
475
        addReplyLongLongWithPrefix(c,ll,':');
476
}
477

478
void addReplyMultiBulkLen(redisClient *c, long length) {
479 480 481 482
    if (length < REDIS_SHARED_BULKHDR_LEN)
        addReply(c,shared.mbulkhdr[length]);
    else
        addReplyLongLongWithPrefix(c,length,'*');
483 484
}

485
/* Create the length prefix of a bulk reply, example: $2234 */
486
void addReplyBulkLen(redisClient *c, robj *obj) {
487
    size_t len;
488

489
    if (sdsEncodedObject(obj)) {
490 491 492 493 494 495 496 497 498 499 500 501 502 503
        len = sdslen(obj->ptr);
    } else {
        long n = (long)obj->ptr;

        /* Compute how many bytes will take this integer as a radix 10 string */
        len = 1;
        if (n < 0) {
            len++;
            n = -n;
        }
        while((n = n/10) != 0) {
            len++;
        }
    }
504 505 506 507 508

    if (len < REDIS_SHARED_BULKHDR_LEN)
        addReply(c,shared.bulkhdr[len]);
    else
        addReplyLongLongWithPrefix(c,len,'$');
509 510
}

511
/* Add a Redis Object as a bulk reply */
512 513 514 515 516 517
void addReplyBulk(redisClient *c, robj *obj) {
    addReplyBulkLen(c,obj);
    addReply(c,obj);
    addReply(c,shared.crlf);
}

518 519
/* Add a C buffer as bulk reply */
void addReplyBulkCBuffer(redisClient *c, void *p, size_t len) {
520
    addReplyLongLongWithPrefix(c,len,'$');
521 522 523 524 525
    addReplyString(c,p,len);
    addReply(c,shared.crlf);
}

/* Add a C nul term string as bulk reply */
526 527 528 529
void addReplyBulkCString(redisClient *c, char *s) {
    if (s == NULL) {
        addReply(c,shared.nullbulk);
    } else {
530
        addReplyBulkCBuffer(c,s,strlen(s));
531 532 533
    }
}

534 535 536 537 538 539 540 541 542
/* Add a long long as a bulk reply */
void addReplyBulkLongLong(redisClient *c, long long ll) {
    char buf[64];
    int len;

    len = ll2string(buf,64,ll);
    addReplyBulkCBuffer(c,buf,len);
}

543 544 545 546 547 548 549 550
/* Copy 'src' client output buffers into 'dst' client output buffers.
 * The function takes care of freeing the old output buffers of the
 * destination client. */
void copyClientOutputBuffer(redisClient *dst, redisClient *src) {
    listRelease(dst->reply);
    dst->reply = listDup(src->reply);
    memcpy(dst->buf,src->buf,src->bufpos);
    dst->bufpos = src->bufpos;
551
    dst->reply_bytes = src->reply_bytes;
552 553
}

A
antirez 已提交
554
#define MAX_ACCEPTS_PER_CALL 1000
555
static void acceptCommonHandler(int fd, int flags) {
556
    redisClient *c;
557
    if ((c = createClient(fd)) == NULL) {
558 559 560
        redisLog(REDIS_WARNING,
            "Error registering fd event for the new client: %s (fd=%d)",
            strerror(errno),fd);
561
        close(fd); /* May be already closed, just ignore errors */
562 563 564 565
        return;
    }
    /* If maxclient directive is set and this is one client more... close the
     * connection. Note that we create the client instead to check before
G
guiquanz 已提交
566
     * for this condition, since now the socket is already set in non-blocking
567
     * mode and we can send an error for free using the Kernel I/O */
568
    if (listLength(server.clients) > server.maxclients) {
569 570 571 572 573 574
        char *err = "-ERR max number of clients reached\r\n";

        /* That's a best effort error message, don't check write errors */
        if (write(c->fd,err,strlen(err)) == -1) {
            /* Nothing to do, Just to avoid the warning... */
        }
575
        server.stat_rejected_conn++;
576 577 578 579
        freeClient(c);
        return;
    }
    server.stat_numconnections++;
580
    c->flags |= flags;
581 582
}

583
void acceptTcpHandler(aeEventLoop *el, int fd, void *privdata, int mask) {
A
antirez 已提交
584
    int cport, cfd, max = MAX_ACCEPTS_PER_CALL;
585
    char cip[REDIS_IP_STR_LEN];
586 587 588 589
    REDIS_NOTUSED(el);
    REDIS_NOTUSED(mask);
    REDIS_NOTUSED(privdata);

A
antirez 已提交
590 591 592 593 594 595 596 597 598 599
    while(max--) {
        cfd = anetTcpAccept(server.neterr, fd, cip, sizeof(cip), &cport);
        if (cfd == ANET_ERR) {
            if (errno != EWOULDBLOCK)
                redisLog(REDIS_WARNING,
                    "Accepting client connection: %s", server.neterr);
            return;
        }
        redisLog(REDIS_VERBOSE,"Accepted %s:%d", cip, cport);
        acceptCommonHandler(cfd,0);
600 601 602 603
    }
}

void acceptUnixHandler(aeEventLoop *el, int fd, void *privdata, int mask) {
A
antirez 已提交
604
    int cfd, max = MAX_ACCEPTS_PER_CALL;
605 606 607 608
    REDIS_NOTUSED(el);
    REDIS_NOTUSED(mask);
    REDIS_NOTUSED(privdata);

A
antirez 已提交
609 610 611 612 613 614 615 616 617 618
    while(max--) {
        cfd = anetUnixAccept(server.neterr, fd);
        if (cfd == ANET_ERR) {
            if (errno != EWOULDBLOCK)
                redisLog(REDIS_WARNING,
                    "Accepting client connection: %s", server.neterr);
            return;
        }
        redisLog(REDIS_VERBOSE,"Accepted connection to %s", server.unixsocket);
        acceptCommonHandler(cfd,REDIS_UNIX_SOCKET);
619 620 621
    }
}

622 623 624 625 626
static void freeClientArgv(redisClient *c) {
    int j;
    for (j = 0; j < c->argc; j++)
        decrRefCount(c->argv[j]);
    c->argc = 0;
627
    c->cmd = NULL;
628 629
}

630 631 632 633 634 635 636 637 638 639
/* Close all the slaves connections. This is useful in chained replication
 * when we resync with our own master and want to force all our slaves to
 * resync with us as well. */
void disconnectSlaves(void) {
    while (listLength(server.slaves)) {
        listNode *ln = listFirst(server.slaves);
        freeClient((redisClient*)ln->value);
    }
}

640 641 642 643 644 645 646 647 648 649 650 651 652 653
/* This function is called when the slave lose the connection with the
 * master into an unexpected way. */
void replicationHandleMasterDisconnection(void) {
    server.master = NULL;
    server.repl_state = REDIS_REPL_CONNECT;
    server.repl_down_since = server.unixtime;
    /* We lost connection with our master, force our slaves to resync
     * with us as well to load the new data set.
     *
     * If server.masterhost is NULL the user called SLAVEOF NO ONE so
     * slave resync is not needed. */
    if (server.masterhost != NULL) disconnectSlaves();
}

654 655 656
void freeClient(redisClient *c) {
    listNode *ln;

657 658 659
    /* If this is marked as current client unset it */
    if (server.current_client == c) server.current_client = NULL;

660 661 662 663 664
    /* If it is our master that's beging disconnected we should make sure
     * to cache the state to try a partial resynchronization later.
     *
     * Note that before doing this we make sure that the client is not in
     * some unexpected state, by checking its flags. */
665 666 667 668 669 670 671 672 673 674
    if (server.master && c->flags & REDIS_MASTER) {
        redisLog(REDIS_WARNING,"Connection with master lost.");
        if (!(c->flags & (REDIS_CLOSE_AFTER_REPLY|
                          REDIS_CLOSE_ASAP|
                          REDIS_BLOCKED|
                          REDIS_UNBLOCKED)))
        {
            replicationCacheMaster(c);
            return;
        }
675 676
    }

677
    /* Log link disconnection with slave */
678
    if ((c->flags & REDIS_SLAVE) && !(c->flags & REDIS_MONITOR)) {
679 680
        char ip[REDIS_IP_STR_LEN];

681 682 683 684
        if (anetPeerToString(c->fd,ip,sizeof(ip),NULL) != -1) {
            redisLog(REDIS_WARNING,"Connection with slave %s:%d lost.",
                ip, c->slave_listening_port);
        }
685 686
    }

687
    /* Free the query buffer */
688 689
    sdsfree(c->querybuf);
    c->querybuf = NULL;
690 691

    /* Deallocate structures used to block on blocking ops. */
692
    if (c->flags & REDIS_BLOCKED) unblockClient(c);
693
    dictRelease(c->bpop.keys);
694 695 696 697

    /* UNWATCH all the keys */
    unwatchAllKeys(c);
    listRelease(c->watched_keys);
698

699 700 701 702 703
    /* Unsubscribe from all the pubsub channels */
    pubsubUnsubscribeAllChannels(c,0);
    pubsubUnsubscribeAllPatterns(c,0);
    dictRelease(c->pubsub_channels);
    listRelease(c->pubsub_patterns);
704

705 706 707 708 709 710 711
    /* Close socket, unregister events, and remove list of replies and
     * accumulated arguments. */
    if (c->fd != -1) {
        aeDeleteFileEvent(server.el,c->fd,AE_READABLE);
        aeDeleteFileEvent(server.el,c->fd,AE_WRITABLE);
        close(c->fd);
    }
712 713
    listRelease(c->reply);
    freeClientArgv(c);
714

715
    /* Remove from the list of clients */
716 717 718 719 720
    if (c->fd != -1) {
        ln = listSearchKey(server.clients,c);
        redisAssert(ln != NULL);
        listDelNode(server.clients,ln);
    }
721

722
    /* When client was just unblocked because of a blocking operation,
A
antirez 已提交
723
     * remove it from the list of unblocked clients. */
724 725 726 727 728
    if (c->flags & REDIS_UNBLOCKED) {
        ln = listSearchKey(server.unblocked_clients,c);
        redisAssert(ln != NULL);
        listDelNode(server.unblocked_clients,ln);
    }
729 730 731

    /* Master/slave cleanup Case 1:
     * we lost the connection with a slave. */
732
    if (c->flags & REDIS_SLAVE) {
733 734 735 736
        if (c->replstate == REDIS_REPL_SEND_BULK) {
            if (c->repldbfd != -1) close(c->repldbfd);
            if (c->replpreamble) sdsfree(c->replpreamble);
        }
737 738 739 740
        list *l = (c->flags & REDIS_MONITOR) ? server.monitors : server.slaves;
        ln = listSearchKey(l,c);
        redisAssert(ln != NULL);
        listDelNode(l,ln);
741 742 743 744 745
        /* We need to remember the time when we started to have zero
         * attached slaves, as after some time we'll free the replication
         * backlog. */
        if (c->flags & REDIS_SLAVE && listLength(server.slaves) == 0)
            server.repl_no_slaves_since = server.unixtime;
746
        refreshGoodSlavesCount();
747
    }
748

749 750
    /* Master/slave cleanup Case 2:
     * we lost the connection with the master. */
751
    if (c->flags & REDIS_MASTER) replicationHandleMasterDisconnection();
752 753 754 755 756 757 758 759 760

    /* If this client was scheduled for async freeing we need to remove it
     * from the queue. */
    if (c->flags & REDIS_CLOSE_ASAP) {
        ln = listSearchKey(server.clients_to_close,c);
        redisAssert(ln != NULL);
        listDelNode(server.clients_to_close,ln);
    }

761 762
    /* Release other dynamically allocated client structure fields,
     * and finally release the client structure itself. */
763
    if (c->name) decrRefCount(c->name);
764 765 766 767 768
    zfree(c->argv);
    freeClientMultiState(c);
    zfree(c);
}

769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789
/* Schedule a client to free it at a safe time in the serverCron() function.
 * This function is useful when we need to terminate a client but we are in
 * a context where calling freeClient() is not possible, because the client
 * should be valid for the continuation of the flow of the program. */
void freeClientAsync(redisClient *c) {
    if (c->flags & REDIS_CLOSE_ASAP) return;
    c->flags |= REDIS_CLOSE_ASAP;
    listAddNodeTail(server.clients_to_close,c);
}

void freeClientsInAsyncFreeQueue(void) {
    while (listLength(server.clients_to_close)) {
        listNode *ln = listFirst(server.clients_to_close);
        redisClient *c = listNodeValue(ln);

        c->flags &= ~REDIS_CLOSE_ASAP;
        freeClient(c);
        listDelNode(server.clients_to_close,ln);
    }
}

790 791 792
void sendReplyToClient(aeEventLoop *el, int fd, void *privdata, int mask) {
    redisClient *c = privdata;
    int nwritten = 0, totwritten = 0, objlen;
793
    size_t objmem;
794 795 796 797
    robj *o;
    REDIS_NOTUSED(el);
    REDIS_NOTUSED(mask);

798 799
    while(c->bufpos > 0 || listLength(c->reply)) {
        if (c->bufpos > 0) {
800 801
            nwritten = write(fd,c->buf+c->sentlen,c->bufpos-c->sentlen);
            if (nwritten <= 0) break;
802 803 804 805 806 807 808 809 810 811 812 813
            c->sentlen += nwritten;
            totwritten += nwritten;

            /* If the buffer was sent, set bufpos to zero to continue with
             * the remainder of the reply. */
            if (c->sentlen == c->bufpos) {
                c->bufpos = 0;
                c->sentlen = 0;
            }
        } else {
            o = listNodeValue(listFirst(c->reply));
            objlen = sdslen(o->ptr);
814
            objmem = getStringObjectSdsUsedMemory(o);
815

816 817
            if (objlen == 0) {
                listDelNode(c->reply,listFirst(c->reply));
818
                c->reply_bytes -= objmem;
819 820
                continue;
            }
821

822 823
            nwritten = write(fd, ((char*)o->ptr)+c->sentlen,objlen-c->sentlen);
            if (nwritten <= 0) break;
824 825
            c->sentlen += nwritten;
            totwritten += nwritten;
826

827 828 829 830
            /* If we fully sent the object on head go to the next one */
            if (c->sentlen == objlen) {
                listDelNode(c->reply,listFirst(c->reply));
                c->sentlen = 0;
831
                c->reply_bytes -= objmem;
832
            }
833
        }
834
        /* Note that we avoid to send more than REDIS_MAX_WRITE_PER_EVENT
835 836 837
         * bytes, in a single threaded server it's a good idea to serve
         * other clients as well, even if a very large request comes from
         * super fast link that is always able to accept data (in real world
838 839 840 841 842 843 844
         * scenario think about 'KEYS *' against the loopback interface).
         *
         * However if we are over the maxmemory limit we ignore that and
         * just deliver as much data as it is possible to deliver. */
        if (totwritten > REDIS_MAX_WRITE_PER_EVENT &&
            (server.maxmemory == 0 ||
             zmalloc_used_memory() < server.maxmemory)) break;
845 846 847 848 849 850 851 852 853 854 855
    }
    if (nwritten == -1) {
        if (errno == EAGAIN) {
            nwritten = 0;
        } else {
            redisLog(REDIS_VERBOSE,
                "Error writing to client: %s", strerror(errno));
            freeClient(c);
            return;
        }
    }
A
antirez 已提交
856 857 858 859 860 861 862
    if (totwritten > 0) {
        /* For clients representing masters we don't count sending data
         * as an interaction, since we always send REPLCONF ACK commands
         * that take some time to just fill the socket output buffer.
         * We just rely on data / pings received for timeout detection. */
        if (!(c->flags & REDIS_MASTER)) c->lastinteraction = server.unixtime;
    }
863
    if (c->bufpos == 0 && listLength(c->reply) == 0) {
864 865
        c->sentlen = 0;
        aeDeleteFileEvent(server.el,c->fd,AE_WRITABLE);
P
Pieter Noordhuis 已提交
866 867

        /* Close connection after entire reply has been sent. */
868
        if (c->flags & REDIS_CLOSE_AFTER_REPLY) freeClient(c);
869 870 871 872 873
    }
}

/* resetClient prepare the client to process the next command */
void resetClient(redisClient *c) {
874 875
    redisCommandProc *prevcmd = c->cmd ? c->cmd->proc : NULL;

876
    freeClientArgv(c);
877 878
    c->reqtype = 0;
    c->multibulklen = 0;
879
    c->bulklen = -1;
880 881 882 883
    /* We clear the ASKING flag as well if we are not inside a MULTI, and
     * if what we just executed is not the ASKING command itself. */
    if (!(c->flags & REDIS_MULTI) && prevcmd != askingCommand)
        c->flags &= (~REDIS_ASKING);
884 885
}

886
int processInlineBuffer(redisClient *c) {
887
    char *newline;
888
    int argc, j;
889
    sds *argv, aux;
890 891
    size_t querylen;

892 893 894
    /* Search for end of line */
    newline = strchr(c->querybuf,'\n');

895
    /* Nothing to do without a \r\n */
896 897 898 899 900
    if (newline == NULL) {
        if (sdslen(c->querybuf) > REDIS_INLINE_MAX_SIZE) {
            addReplyError(c,"Protocol error: too big inline request");
            setProtocolError(c,0);
        }
901
        return REDIS_ERR;
902
    }
903

904 905 906 907
    /* Handle the \r\n case. */
    if (newline && newline != c->querybuf && *(newline-1) == '\r')
        newline--;

908 909
    /* Split the input buffer up to the \r\n */
    querylen = newline-(c->querybuf);
910 911 912
    aux = sdsnewlen(c->querybuf,querylen);
    argv = sdssplitargs(aux,&argc);
    sdsfree(aux);
913 914 915 916 917
    if (argv == NULL) {
        addReplyError(c,"Protocol error: unbalanced quotes in request");
        setProtocolError(c,0);
        return REDIS_ERR;
    }
918

919 920 921 922 923 924
    /* Newline from slaves can be used to refresh the last ACK time.
     * This is useful for a slave to ping back while loading a big
     * RDB file. */
    if (querylen == 0 && c->flags & REDIS_SLAVE)
        c->repl_ack_time = server.unixtime;

925
    /* Leave data after the first line of the query in the buffer */
926
    sdsrange(c->querybuf,querylen+2,-1);
927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947

    /* Setup argv array on client structure */
    if (c->argv) zfree(c->argv);
    c->argv = zmalloc(sizeof(robj*)*argc);

    /* Create redis objects for all arguments. */
    for (c->argc = 0, j = 0; j < argc; j++) {
        if (sdslen(argv[j])) {
            c->argv[c->argc] = createObject(REDIS_STRING,argv[j]);
            c->argc++;
        } else {
            sdsfree(argv[j]);
        }
    }
    zfree(argv);
    return REDIS_OK;
}

/* Helper function. Trims query buffer to make the function that processes
 * multi bulk requests idempotent. */
static void setProtocolError(redisClient *c, int pos) {
948 949 950 951 952 953
    if (server.verbosity >= REDIS_VERBOSE) {
        sds client = getClientInfoString(c);
        redisLog(REDIS_VERBOSE,
            "Protocol error from client: %s", client);
        sdsfree(client);
    }
954
    c->flags |= REDIS_CLOSE_AFTER_REPLY;
955
    sdsrange(c->querybuf,pos,-1);
956 957 958 959
}

int processMultibulkBuffer(redisClient *c) {
    char *newline = NULL;
960 961
    int pos = 0, ok;
    long long ll;
962 963 964

    if (c->multibulklen == 0) {
        /* The client should have been reset */
965
        redisAssertWithInfo(c,NULL,c->argc == 0);
966 967

        /* Multi bulk length cannot be read without a \r\n */
968
        newline = strchr(c->querybuf,'\r');
969 970 971 972 973
        if (newline == NULL) {
            if (sdslen(c->querybuf) > REDIS_INLINE_MAX_SIZE) {
                addReplyError(c,"Protocol error: too big mbulk count string");
                setProtocolError(c,0);
            }
974
            return REDIS_ERR;
975
        }
976

P
Pieter Noordhuis 已提交
977 978 979 980
        /* Buffer should also contain \n */
        if (newline-(c->querybuf) > ((signed)sdslen(c->querybuf)-2))
            return REDIS_ERR;

981 982
        /* We know for sure there is a whole line since newline != NULL,
         * so go ahead and find out the multi bulk length. */
983
        redisAssertWithInfo(c,NULL,c->querybuf[0] == '*');
984 985
        ok = string2ll(c->querybuf+1,newline-(c->querybuf+1),&ll);
        if (!ok || ll > 1024*1024) {
986 987 988
            addReplyError(c,"Protocol error: invalid multibulk length");
            setProtocolError(c,pos);
            return REDIS_ERR;
989
        }
P
Pieter Noordhuis 已提交
990 991 992

        pos = (newline-c->querybuf)+2;
        if (ll <= 0) {
993
            sdsrange(c->querybuf,pos,-1);
P
Pieter Noordhuis 已提交
994 995 996
            return REDIS_OK;
        }

997
        c->multibulklen = ll;
998 999 1000 1001 1002 1003

        /* Setup argv array on client structure */
        if (c->argv) zfree(c->argv);
        c->argv = zmalloc(sizeof(robj*)*c->multibulklen);
    }

1004
    redisAssertWithInfo(c,NULL,c->multibulklen > 0);
1005 1006 1007
    while(c->multibulklen) {
        /* Read bulk length if unknown */
        if (c->bulklen == -1) {
1008
            newline = strchr(c->querybuf+pos,'\r');
1009 1010
            if (newline == NULL) {
                if (sdslen(c->querybuf) > REDIS_INLINE_MAX_SIZE) {
1011 1012
                    addReplyError(c,
                        "Protocol error: too big bulk count string");
1013
                    setProtocolError(c,0);
1014
                    return REDIS_ERR;
1015
                }
P
Pieter Noordhuis 已提交
1016
                break;
1017
            }
P
Pieter Noordhuis 已提交
1018 1019 1020

            /* Buffer should also contain \n */
            if (newline-(c->querybuf) > ((signed)sdslen(c->querybuf)-2))
1021
                break;
P
Pieter Noordhuis 已提交
1022 1023 1024 1025 1026 1027 1028

            if (c->querybuf[pos] != '$') {
                addReplyErrorFormat(c,
                    "Protocol error: expected '$', got '%c'",
                    c->querybuf[pos]);
                setProtocolError(c,pos);
                return REDIS_ERR;
1029
            }
P
Pieter Noordhuis 已提交
1030 1031 1032 1033 1034 1035 1036 1037 1038

            ok = string2ll(c->querybuf+pos+1,newline-(c->querybuf+pos+1),&ll);
            if (!ok || ll < 0 || ll > 512*1024*1024) {
                addReplyError(c,"Protocol error: invalid bulk length");
                setProtocolError(c,pos);
                return REDIS_ERR;
            }

            pos += newline-(c->querybuf+pos)+2;
1039
            if (ll >= REDIS_MBULK_BIG_ARG) {
1040 1041
                size_t qblen;

1042 1043
                /* If we are going to read a large object from network
                 * try to make it likely that it will start at c->querybuf
1044
                 * boundary so that we can optimize object creation
1045
                 * avoiding a large copy of data. */
1046
                sdsrange(c->querybuf,pos,-1);
1047
                pos = 0;
1048
                qblen = sdslen(c->querybuf);
A
antirez 已提交
1049 1050
                /* Hint the sds library about the amount of bytes this string is
                 * going to contain. */
1051 1052
                if (qblen < ll+2)
                    c->querybuf = sdsMakeRoomFor(c->querybuf,ll+2-qblen);
A
antirez 已提交
1053
            }
P
Pieter Noordhuis 已提交
1054
            c->bulklen = ll;
1055 1056 1057 1058 1059 1060 1061
        }

        /* Read bulk argument */
        if (sdslen(c->querybuf)-pos < (unsigned)(c->bulklen+2)) {
            /* Not enough data (+2 == trailing \r\n) */
            break;
        } else {
1062
            /* Optimization: if the buffer contains JUST our bulk element
1063 1064 1065
             * instead of creating a new object by *copying* the sds we
             * just use the current sds string. */
            if (pos == 0 &&
1066
                c->bulklen >= REDIS_MBULK_BIG_ARG &&
1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080
                (signed) sdslen(c->querybuf) == c->bulklen+2)
            {
                c->argv[c->argc++] = createObject(REDIS_STRING,c->querybuf);
                sdsIncrLen(c->querybuf,-2); /* remove CRLF */
                c->querybuf = sdsempty();
                /* Assume that if we saw a fat argument we'll see another one
                 * likely... */
                c->querybuf = sdsMakeRoomFor(c->querybuf,c->bulklen+2);
                pos = 0;
            } else {
                c->argv[c->argc++] =
                    createStringObject(c->querybuf+pos,c->bulklen);
                pos += c->bulklen+2;
            }
1081 1082 1083 1084 1085 1086
            c->bulklen = -1;
            c->multibulklen--;
        }
    }

    /* Trim to pos */
1087
    if (pos) sdsrange(c->querybuf,pos,-1);
1088 1089

    /* We're done when c->multibulk == 0 */
1090 1091 1092
    if (c->multibulklen == 0) return REDIS_OK;

    /* Still not read to process the command */
1093 1094 1095 1096 1097 1098
    return REDIS_ERR;
}

void processInputBuffer(redisClient *c) {
    /* Keep processing while there is something in the input buffer */
    while(sdslen(c->querybuf)) {
1099 1100 1101
        /* Return if clients are paused. */
        if (!(c->flags & REDIS_SLAVE) && clientsArePaused()) return;

1102 1103 1104
        /* Immediately abort if the client is in the middle of something. */
        if (c->flags & REDIS_BLOCKED) return;

1105 1106 1107 1108
        /* REDIS_CLOSE_AFTER_REPLY closes the connection once the reply is
         * written to the client. Make sure to not let the reply grow after
         * this flag has been set (i.e. don't process more commands). */
        if (c->flags & REDIS_CLOSE_AFTER_REPLY) return;
1109 1110 1111 1112 1113

        /* Determine request type when unknown. */
        if (!c->reqtype) {
            if (c->querybuf[0] == '*') {
                c->reqtype = REDIS_REQ_MULTIBULK;
1114
            } else {
1115
                c->reqtype = REDIS_REQ_INLINE;
1116 1117
            }
        }
1118 1119 1120 1121 1122 1123 1124

        if (c->reqtype == REDIS_REQ_INLINE) {
            if (processInlineBuffer(c) != REDIS_OK) break;
        } else if (c->reqtype == REDIS_REQ_MULTIBULK) {
            if (processMultibulkBuffer(c) != REDIS_OK) break;
        } else {
            redisPanic("Unknown request type");
1125
        }
1126 1127

        /* Multibulk processing could see a <= 0 length. */
1128 1129 1130 1131 1132 1133 1134
        if (c->argc == 0) {
            resetClient(c);
        } else {
            /* Only reset the client when the command was executed. */
            if (processCommand(c) == REDIS_OK)
                resetClient(c);
        }
1135 1136 1137 1138 1139
    }
}

void readQueryFromClient(aeEventLoop *el, int fd, void *privdata, int mask) {
    redisClient *c = (redisClient*) privdata;
1140
    int nread, readlen;
1141
    size_t qblen;
1142 1143 1144
    REDIS_NOTUSED(el);
    REDIS_NOTUSED(mask);

1145
    server.current_client = c;
1146 1147
    readlen = REDIS_IOBUF_LEN;
    /* If this is a multi bulk request, and we are processing a bulk reply
1148 1149 1150
     * that is large enough, try to maximize the probability that the query
     * buffer contains exactly the SDS string representing the object, even
     * at the risk of requiring more read(2) calls. This way the function
1151 1152 1153
     * processMultiBulkBuffer() can avoid copying buffers to create the
     * Redis Object representing the argument. */
    if (c->reqtype == REDIS_REQ_MULTIBULK && c->multibulklen && c->bulklen != -1
1154
        && c->bulklen >= REDIS_MBULK_BIG_ARG)
1155 1156 1157 1158 1159 1160
    {
        int remaining = (unsigned)(c->bulklen+2)-sdslen(c->querybuf);

        if (remaining < readlen) readlen = remaining;
    }

1161
    qblen = sdslen(c->querybuf);
1162
    if (c->querybuf_peak < qblen) c->querybuf_peak = qblen;
1163 1164
    c->querybuf = sdsMakeRoomFor(c->querybuf, readlen);
    nread = read(fd, c->querybuf+qblen, readlen);
1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178
    if (nread == -1) {
        if (errno == EAGAIN) {
            nread = 0;
        } else {
            redisLog(REDIS_VERBOSE, "Reading from client: %s",strerror(errno));
            freeClient(c);
            return;
        }
    } else if (nread == 0) {
        redisLog(REDIS_VERBOSE, "Client closed connection");
        freeClient(c);
        return;
    }
    if (nread) {
1179
        sdsIncrLen(c->querybuf,nread);
1180
        c->lastinteraction = server.unixtime;
1181
        if (c->flags & REDIS_MASTER) c->reploff += nread;
1182
    } else {
1183
        server.current_client = NULL;
1184 1185
        return;
    }
1186
    if (sdslen(c->querybuf) > server.client_max_querybuf_len) {
1187 1188 1189 1190
        sds ci = getClientInfoString(c), bytes = sdsempty();

        bytes = sdscatrepr(bytes,c->querybuf,64);
        redisLog(REDIS_WARNING,"Closing client that reached max query buffer length: %s (qbuf initial bytes: %s)", ci, bytes);
1191
        sdsfree(ci);
1192
        sdsfree(bytes);
1193 1194 1195
        freeClient(c);
        return;
    }
1196
    processInputBuffer(c);
1197
    server.current_client = NULL;
1198
}
1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217

void getClientsMaxBuffers(unsigned long *longest_output_list,
                          unsigned long *biggest_input_buffer) {
    redisClient *c;
    listNode *ln;
    listIter li;
    unsigned long lol = 0, bib = 0;

    listRewind(server.clients,&li);
    while ((ln = listNext(&li)) != NULL) {
        c = listNodeValue(ln);

        if (listLength(c->reply) > lol) lol = listLength(c->reply);
        if (sdslen(c->querybuf) > bib) bib = sdslen(c->querybuf);
    }
    *longest_output_list = lol;
    *biggest_input_buffer = bib;
}

1218
/* This is a helper function for getClientPeerId().
1219 1220 1221 1222 1223 1224 1225 1226 1227 1228
 * It writes the specified ip/port to "peerid" as a null termiated string
 * in the form ip:port if ip does not contain ":" itself, otherwise
 * [ip]:port format is used (for IPv6 addresses basically). */
void formatPeerId(char *peerid, size_t peerid_len, char *ip, int port) {
    if (strchr(ip,':'))
        snprintf(peerid,peerid_len,"[%s]:%d",ip,port);
    else
        snprintf(peerid,peerid_len,"%s:%d",ip,port);
}

A
antirez 已提交
1229 1230 1231 1232 1233 1234 1235 1236
/* A Redis "Peer ID" is a colon separated ip:port pair.
 * For IPv4 it's in the form x.y.z.k:pork, example: "127.0.0.1:1234".
 * For IPv6 addresses we use [] around the IP part, like in "[::1]:1234".
 * For Unix socekts we use path:0, like in "/tmp/redis:0".
 *
 * A Peer ID always fits inside a buffer of REDIS_PEER_ID_LEN bytes, including
 * the null term.
 *
A
antirez 已提交
1237 1238 1239 1240 1241 1242
 * The function returns REDIS_OK on succcess, and REDIS_ERR on failure.
 *
 * On failure the function still populates 'peerid' with the "?:0" string
 * in case you want to relax error checking or need to display something
 * anyway (see anetPeerToString implementation for more info). */
int getClientPeerId(redisClient *client, char *peerid, size_t peerid_len) {
A
antirez 已提交
1243 1244 1245 1246 1247 1248
    char ip[REDIS_IP_STR_LEN];
    int port;

    if (client->flags & REDIS_UNIX_SOCKET) {
        /* Unix socket client. */
        snprintf(peerid,peerid_len,"%s:0",server.unixsocket);
A
antirez 已提交
1249
        return REDIS_OK;
A
antirez 已提交
1250 1251
    } else {
        /* TCP client. */
A
antirez 已提交
1252
        int retval = anetPeerToString(client->fd,ip,sizeof(ip),&port);
1253
        formatPeerId(peerid,peerid_len,ip,port);
A
antirez 已提交
1254
        return (retval == -1) ? REDIS_ERR : REDIS_OK;
A
antirez 已提交
1255 1256 1257
    }
}

1258 1259
/* Turn a Redis client into an sds string representing its state. */
sds getClientInfoString(redisClient *client) {
A
antirez 已提交
1260
    char peerid[REDIS_PEER_ID_LEN], flags[16], events[3], *p;
1261
    int emask;
1262

A
antirez 已提交
1263
    getClientPeerId(client,peerid,sizeof(peerid));
1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276
    p = flags;
    if (client->flags & REDIS_SLAVE) {
        if (client->flags & REDIS_MONITOR)
            *p++ = 'O';
        else
            *p++ = 'S';
    }
    if (client->flags & REDIS_MASTER) *p++ = 'M';
    if (client->flags & REDIS_MULTI) *p++ = 'x';
    if (client->flags & REDIS_BLOCKED) *p++ = 'b';
    if (client->flags & REDIS_DIRTY_CAS) *p++ = 'd';
    if (client->flags & REDIS_CLOSE_AFTER_REPLY) *p++ = 'c';
    if (client->flags & REDIS_UNBLOCKED) *p++ = 'u';
1277
    if (client->flags & REDIS_CLOSE_ASAP) *p++ = 'A';
1278
    if (client->flags & REDIS_UNIX_SOCKET) *p++ = 'U';
1279
    if (client->flags & REDIS_READONLY) *p++ = 'r';
1280
    if (p == flags) *p++ = 'N';
1281
    *p++ = '\0';
1282 1283 1284 1285 1286 1287

    emask = client->fd == -1 ? 0 : aeGetFileEvents(server.el,client->fd);
    p = events;
    if (emask & AE_READABLE) *p++ = 'r';
    if (emask & AE_WRITABLE) *p++ = 'w';
    *p = '\0';
1288
    return sdscatprintf(sdsempty(),
A
antirez 已提交
1289 1290
        "addr=%s fd=%d name=%s age=%ld idle=%ld flags=%s db=%d sub=%d psub=%d multi=%d qbuf=%lu qbuf-free=%lu obl=%lu oll=%lu omem=%lu events=%s cmd=%s",
        peerid,
1291 1292
        client->fd,
        client->name ? (char*)client->name->ptr : "",
1293 1294
        (long)(server.unixtime - client->ctime),
        (long)(server.unixtime - client->lastinteraction),
1295 1296 1297
        flags,
        client->db->id,
        (int) dictSize(client->pubsub_channels),
1298
        (int) listLength(client->pubsub_patterns),
1299
        (client->flags & REDIS_MULTI) ? client->mstate.count : -1,
1300
        (unsigned long) sdslen(client->querybuf),
1301
        (unsigned long) sdsavail(client->querybuf),
1302
        (unsigned long) client->bufpos,
1303
        (unsigned long) listLength(client->reply),
1304
        getClientOutputBufferMemoryUsage(client),
1305 1306
        events,
        client->lastcmd ? client->lastcmd->name : "NULL");
1307 1308
}

1309 1310 1311 1312 1313 1314 1315 1316
sds getAllClientsInfoString(void) {
    listNode *ln;
    listIter li;
    redisClient *client;
    sds o = sdsempty();

    listRewind(server.clients,&li);
    while ((ln = listNext(&li)) != NULL) {
1317 1318
        sds cs;

1319
        client = listNodeValue(ln);
1320 1321 1322
        cs = getClientInfoString(client);
        o = sdscatsds(o,cs);
        sdsfree(cs);
1323 1324 1325 1326 1327
        o = sdscatlen(o,"\n",1);
    }
    return o;
}

A
antirez 已提交
1328
void clientCommand(redisClient *c) {
A
antirez 已提交
1329 1330 1331 1332
    listNode *ln;
    listIter li;
    redisClient *client;

A
antirez 已提交
1333
    if (!strcasecmp(c->argv[1]->ptr,"list") && c->argc == 2) {
1334
        sds o = getAllClientsInfoString();
A
antirez 已提交
1335 1336
        addReplyBulkCBuffer(c,o,sdslen(o));
        sdsfree(o);
A
antirez 已提交
1337 1338 1339
    } else if (!strcasecmp(c->argv[1]->ptr,"kill") && c->argc == 3) {
        listRewind(server.clients,&li);
        while ((ln = listNext(&li)) != NULL) {
A
antirez 已提交
1340
            char peerid[REDIS_PEER_ID_LEN];
A
antirez 已提交
1341 1342

            client = listNodeValue(ln);
A
antirez 已提交
1343 1344 1345
            if (getClientPeerId(client,peerid,sizeof(peerid)) == REDIS_ERR)
                continue;
            if (strcmp(peerid,c->argv[2]->ptr) == 0) {
A
antirez 已提交
1346 1347 1348 1349 1350 1351 1352 1353 1354 1355
                addReply(c,shared.ok);
                if (c == client) {
                    client->flags |= REDIS_CLOSE_AFTER_REPLY;
                } else {
                    freeClient(client);
                }
                return;
            }
        }
        addReplyError(c,"No such client");
1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372
    } else if (!strcasecmp(c->argv[1]->ptr,"setname") && c->argc == 3) {
        int j, len = sdslen(c->argv[2]->ptr);
        char *p = c->argv[2]->ptr;

        /* Setting the client name to an empty string actually removes
         * the current name. */
        if (len == 0) {
            if (c->name) decrRefCount(c->name);
            c->name = NULL;
            addReply(c,shared.ok);
            return;
        }

        /* Otherwise check if the charset is ok. We need to do this otherwise
         * CLIENT LIST format will break. You should always be able to
         * split by space to get the different fields. */
        for (j = 0; j < len; j++) {
A
antirez 已提交
1373
            if (p[j] < '!' || p[j] > '~') { /* ASCII is assumed. */
1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388
                addReplyError(c,
                    "Client names cannot contain spaces, "
                    "newlines or special characters.");
                return;
            }
        }
        if (c->name) decrRefCount(c->name);
        c->name = c->argv[2];
        incrRefCount(c->name);
        addReply(c,shared.ok);
    } else if (!strcasecmp(c->argv[1]->ptr,"getname") && c->argc == 2) {
        if (c->name)
            addReplyBulk(c,c->name);
        else
            addReply(c,shared.nullbulk);
1389 1390 1391 1392 1393 1394 1395
    } else if (!strcasecmp(c->argv[1]->ptr,"pause") && c->argc == 3) {
        long long duration;

        if (getTimeoutFromObjectOrReply(c,c->argv[2],&duration,UNIT_MILLISECONDS)
                                        != REDIS_OK) return;
        pauseClients(duration);
        addReply(c,shared.ok);
A
antirez 已提交
1396
    } else {
B
bitterb 已提交
1397
        addReplyError(c, "Syntax error, try CLIENT (LIST | KILL ip:port | GETNAME | SETNAME connection-name)");
A
antirez 已提交
1398 1399
    }
}
1400

1401 1402 1403
/* Rewrite the command vector of the client. All the new objects ref count
 * is incremented. The old command vector is freed, and the old objects
 * ref count is decremented. */
1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425
void rewriteClientCommandVector(redisClient *c, int argc, ...) {
    va_list ap;
    int j;
    robj **argv; /* The new argument vector */

    argv = zmalloc(sizeof(robj*)*argc);
    va_start(ap,argc);
    for (j = 0; j < argc; j++) {
        robj *a;
        
        a = va_arg(ap, robj*);
        argv[j] = a;
        incrRefCount(a);
    }
    /* We free the objects in the original vector at the end, so we are
     * sure that if the same objects are reused in the new vector the
     * refcount gets incremented before it gets decremented. */
    for (j = 0; j < c->argc; j++) decrRefCount(c->argv[j]);
    zfree(c->argv);
    /* Replace argv and argc with our new versions. */
    c->argv = argv;
    c->argc = argc;
1426
    c->cmd = lookupCommandOrOriginal(c->argv[0]->ptr);
1427
    redisAssertWithInfo(c,NULL,c->cmd != NULL);
1428 1429
    va_end(ap);
}
1430 1431 1432 1433 1434 1435

/* Rewrite a single item in the command vector.
 * The new val ref count is incremented, and the old decremented. */
void rewriteClientCommandArgument(redisClient *c, int i, robj *newval) {
    robj *oldval;
   
1436
    redisAssertWithInfo(c,NULL,i < c->argc);
1437 1438 1439 1440 1441 1442 1443
    oldval = c->argv[i];
    c->argv[i] = newval;
    incrRefCount(newval);
    decrRefCount(oldval);

    /* If this is the command name make sure to fix c->cmd. */
    if (i == 0) {
1444
        c->cmd = lookupCommandOrOriginal(c->argv[0]->ptr);
1445
        redisAssertWithInfo(c,NULL,c->cmd != NULL);
1446 1447
    }
}
1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460

/* This function returns the number of bytes that Redis is virtually
 * using to store the reply still not read by the client.
 * It is "virtual" since the reply output list may contain objects that
 * are shared and are not really using additional memory.
 *
 * The function returns the total sum of the length of all the objects
 * stored in the output list, plus the memory used to allocate every
 * list node. The static reply buffer is not taken into account since it
 * is allocated anyway.
 *
 * Note: this function is very fast so can be called as many time as
 * the caller wishes. The main usage of this function currently is
A
antirez 已提交
1461
 * enforcing the client output length limits. */
1462
unsigned long getClientOutputBufferMemoryUsage(redisClient *c) {
1463
    unsigned long list_item_size = sizeof(listNode)+sizeof(robj);
1464 1465 1466

    return c->reply_bytes + (list_item_size*listLength(c->reply));
}
1467

1468
/* Get the class of a client, used in order to enforce limits to different
1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481
 * classes of clients.
 *
 * The function will return one of the following:
 * REDIS_CLIENT_LIMIT_CLASS_NORMAL -> Normal client
 * REDIS_CLIENT_LIMIT_CLASS_SLAVE  -> Slave or client executing MONITOR command
 * REDIS_CLIENT_LIMIT_CLASS_PUBSUB -> Client subscribed to Pub/Sub channels
 */
int getClientLimitClass(redisClient *c) {
    if (c->flags & REDIS_SLAVE) return REDIS_CLIENT_LIMIT_CLASS_SLAVE;
    if (dictSize(c->pubsub_channels) || listLength(c->pubsub_patterns))
        return REDIS_CLIENT_LIMIT_CLASS_PUBSUB;
    return REDIS_CLIENT_LIMIT_CLASS_NORMAL;
}
1482

1483 1484 1485
int getClientLimitClassByName(char *name) {
    if (!strcasecmp(name,"normal")) return REDIS_CLIENT_LIMIT_CLASS_NORMAL;
    else if (!strcasecmp(name,"slave")) return REDIS_CLIENT_LIMIT_CLASS_SLAVE;
1486
    else if (!strcasecmp(name,"pubsub")) return REDIS_CLIENT_LIMIT_CLASS_PUBSUB;
1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498
    else return -1;
}

char *getClientLimitClassName(int class) {
    switch(class) {
    case REDIS_CLIENT_LIMIT_CLASS_NORMAL:   return "normal";
    case REDIS_CLIENT_LIMIT_CLASS_SLAVE:    return "slave";
    case REDIS_CLIENT_LIMIT_CLASS_PUBSUB:   return "pubsub";
    default:                                return NULL;
    }
}

1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539
/* The function checks if the client reached output buffer soft or hard
 * limit, and also update the state needed to check the soft limit as
 * a side effect.
 *
 * Return value: non-zero if the client reached the soft or the hard limit.
 *               Otherwise zero is returned. */
int checkClientOutputBufferLimits(redisClient *c) {
    int soft = 0, hard = 0, class;
    unsigned long used_mem = getClientOutputBufferMemoryUsage(c);

    class = getClientLimitClass(c);
    if (server.client_obuf_limits[class].hard_limit_bytes &&
        used_mem >= server.client_obuf_limits[class].hard_limit_bytes)
        hard = 1;
    if (server.client_obuf_limits[class].soft_limit_bytes &&
        used_mem >= server.client_obuf_limits[class].soft_limit_bytes)
        soft = 1;

    /* We need to check if the soft limit is reached continuously for the
     * specified amount of seconds. */
    if (soft) {
        if (c->obuf_soft_limit_reached_time == 0) {
            c->obuf_soft_limit_reached_time = server.unixtime;
            soft = 0; /* First time we see the soft limit reached */
        } else {
            time_t elapsed = server.unixtime - c->obuf_soft_limit_reached_time;

            if (elapsed <=
                server.client_obuf_limits[class].soft_limit_seconds) {
                soft = 0; /* The client still did not reached the max number of
                             seconds for the soft limit to be considered
                             reached. */
            }
        }
    } else {
        c->obuf_soft_limit_reached_time = 0;
    }
    return soft || hard;
}

/* Asynchronously close a client if soft or hard limit is reached on the
1540 1541
 * output buffer size. The caller can check if the client will be closed
 * checking if the client REDIS_CLOSE_ASAP flag is set.
1542 1543 1544 1545
 *
 * Note: we need to close the client asynchronously because this function is
 * called from contexts where the client can't be freed safely, i.e. from the
 * lower level functions pushing data inside the client output buffers. */
1546
void asyncCloseClientOnOutputBufferLimitReached(redisClient *c) {
1547
    redisAssert(c->reply_bytes < ULONG_MAX-(1024*64));
1548
    if (c->reply_bytes == 0 || c->flags & REDIS_CLOSE_ASAP) return;
1549 1550 1551 1552
    if (checkClientOutputBufferLimits(c)) {
        sds client = getClientInfoString(c);

        freeClientAsync(c);
1553
        redisLog(REDIS_WARNING,"Client %s scheduled to be closed ASAP for overcoming of output buffer limits.", client);
1554 1555 1556
        sdsfree(client);
    }
}
A
antirez 已提交
1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577

/* Helper function used by freeMemoryIfNeeded() in order to flush slaves
 * output buffers without returning control to the event loop. */
void flushSlavesOutputBuffers(void) {
    listIter li;
    listNode *ln;

    listRewind(server.slaves,&li);
    while((ln = listNext(&li))) {
        redisClient *slave = listNodeValue(ln);
        int events;

        events = aeGetFileEvents(server.el,slave->fd);
        if (events & AE_WRITABLE &&
            slave->replstate == REDIS_REPL_ONLINE &&
            listLength(slave->reply))
        {
            sendReplyToClient(server.el,slave->fd,slave,0);
        }
    }
}
1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616 1617 1618 1619 1620 1621 1622 1623

/* Pause clients up to the specified unixtime (in ms). While clients
 * are paused no command is processed from clients, so the data set can't
 * change during that time.
 *
 * However while this function pauses normal and Pub/Sub clients, slaves are
 * still served, so this function can be used on server upgrades where it is
 * required that slaves process the latest bytes from the replication stream
 * before being turned to masters.
 *
 * This function is also internally used by Redis Cluster for the manual
 * failover procedure implemented by CLUSTER FAILOVER.
 *
 * The function always succeed, even if there is already a pause in progress.
 * In such a case, the pause is extended if the duration is more than the
 * time left for the previous duration. However if the duration is smaller
 * than the time left for the previous pause, no change is made to the
 * left duration. */
void pauseClients(mstime_t end) {
    if (!server.clients_paused || end > server.clients_pause_end_time)
        server.clients_pause_end_time = end;
    server.clients_paused = 1;
}

/* Return non-zero if clients are currently paused. As a side effect the
 * function checks if the pause time was reached and clear it. */
int clientsArePaused(void) {
    if (server.clients_paused && server.clients_pause_end_time < server.mstime) {
        listNode *ln;
        listIter li;
        redisClient *c;

        server.clients_paused = 0;

        /* Put all the clients in the unblocked clients queue in order to
         * force the re-processing of the input buffer if any. */
        listRewind(server.clients,&li);
        while ((ln = listNext(&li)) != NULL) {
            c = listNodeValue(ln);

            if (c->flags & REDIS_SLAVE) continue;
            listAddNodeTail(server.unblocked_clients,c);
        }
    }
    return server.clients_paused;
}