networking.c 53.2 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
/*
 * Copyright (c) 2009-2012, Salvatore Sanfilippo <antirez at gmail dot com>
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are met:
 *
 *   * Redistributions of source code must retain the above copyright notice,
 *     this list of conditions and the following disclaimer.
 *   * Redistributions in binary form must reproduce the above copyright
 *     notice, this list of conditions and the following disclaimer in the
 *     documentation and/or other materials provided with the distribution.
 *   * Neither the name of Redis nor the names of its contributors may be used
 *     to endorse or promote products derived from this software without
 *     specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 */

30 31
#include "redis.h"
#include <sys/uio.h>
32
#include <math.h>
33

34 35
static void setProtocolError(redisClient *c, int pos);

36 37 38 39 40 41 42 43
/* To evaluate the output buffer size of a client we need to get size of
 * allocated objects, however we can't used zmalloc_size() directly on sds
 * strings because of the trick they use to work (the header is before the
 * returned pointer), so we use this helper function. */
size_t zmalloc_size_sds(sds s) {
    return zmalloc_size(s-sizeof(struct sdshdr));
}

44 45 46 47 48 49 50 51 52 53 54
/* Return the amount of memory used by the sds string at object->ptr
 * for a string object. */
size_t getStringObjectSdsUsedMemory(robj *o) {
    redisAssertWithInfo(NULL,o,o->type == REDIS_STRING);
    switch(o->encoding) {
    case REDIS_ENCODING_RAW: return zmalloc_size_sds(o->ptr);
    case REDIS_ENCODING_EMBSTR: return sdslen(o->ptr);
    default: return 0; /* Just integer encoding for now. */
    }
}

55 56 57 58 59 60 61 62 63 64
void *dupClientReplyValue(void *o) {
    incrRefCount((robj*)o);
    return o;
}

int listMatchObjects(void *a, void *b) {
    return equalStringObjects(a,b);
}

redisClient *createClient(int fd) {
65
    redisClient *c = zmalloc(sizeof(redisClient));
66

67 68 69 70 71 72
    /* passing -1 as fd it is possible to create a non connected client.
     * This is useful since all the Redis commands needs to be executed
     * in the context of a client. When commands are executed in other
     * contexts (for instance a Lua script) we need a non connected client. */
    if (fd != -1) {
        anetNonBlock(NULL,fd);
73
        anetEnableTcpNoDelay(NULL,fd);
74 75
        if (server.tcpkeepalive)
            anetKeepAlive(NULL,fd,server.tcpkeepalive);
76 77 78 79 80 81 82
        if (aeCreateFileEvent(server.el,fd,AE_READABLE,
            readQueryFromClient, c) == AE_ERR)
        {
            close(fd);
            zfree(c);
            return NULL;
        }
83 84
    }

85 86
    selectDb(c,0);
    c->fd = fd;
87
    c->name = NULL;
88
    c->bufpos = 0;
89
    c->querybuf = sdsempty();
90
    c->querybuf_peak = 0;
91
    c->reqtype = 0;
92 93
    c->argc = 0;
    c->argv = NULL;
94
    c->cmd = c->lastcmd = NULL;
95
    c->multibulklen = 0;
96 97 98
    c->bulklen = -1;
    c->sentlen = 0;
    c->flags = 0;
99
    c->ctime = c->lastinteraction = server.unixtime;
100 101
    c->authenticated = 0;
    c->replstate = REDIS_REPL_NONE;
102
    c->reploff = 0;
A
antirez 已提交
103 104
    c->repl_ack_off = 0;
    c->repl_ack_time = 0;
A
antirez 已提交
105
    c->slave_listening_port = 0;
106
    c->reply = listCreate();
107
    c->reply_bytes = 0;
108
    c->obuf_soft_limit_reached_time = 0;
109
    listSetFreeMethod(c->reply,decrRefCountVoid);
110
    listSetDupMethod(c->reply,dupClientReplyValue);
111
    c->btype = REDIS_BLOCKED_NONE;
112
    c->bpop.timeout = 0;
113
    c->bpop.keys = dictCreate(&setDictType,NULL);
114
    c->bpop.target = NULL;
115 116
    c->bpop.numreplicas = 0;
    c->bpop.reploffset = 0;
117
    c->woff = 0;
118 119 120
    c->watched_keys = listCreate();
    c->pubsub_channels = dictCreate(&setDictType,NULL);
    c->pubsub_patterns = listCreate();
121
    listSetFreeMethod(c->pubsub_patterns,decrRefCountVoid);
122
    listSetMatchMethod(c->pubsub_patterns,listMatchObjects);
123
    if (fd != -1) listAddNodeTail(server.clients,c);
124 125 126 127
    initClientMultiState(c);
    return c;
}

128 129 130 131 132 133 134
/* This function is called every time we are going to transmit new data
 * to the client. The behavior is the following:
 *
 * If the client should receive new data (normal clients will) the function
 * returns REDIS_OK, and make sure to install the write handler in our event
 * loop so that when the socket is writable new data gets written.
 *
135 136
 * If the client should not receive new data, because it is a fake client,
 * a master, a slave not yet online, or because the setup of the write handler
137
 * failed, the function returns REDIS_ERR.
138 139 140 141 142
 *
 * Typically gets called every time a reply is built, before adding more
 * data to the clients output buffers. If the function returns REDIS_ERR no
 * data should be appended to the output buffers. */
int prepareClientToWrite(redisClient *c) {
143
    if (c->flags & REDIS_LUA_CLIENT) return REDIS_OK;
144 145
    if ((c->flags & REDIS_MASTER) &&
        !(c->flags & REDIS_MASTER_FORCE_REPLY)) return REDIS_ERR;
146
    if (c->fd <= 0) return REDIS_ERR; /* Fake client */
147
    if (c->bufpos == 0 && listLength(c->reply) == 0 &&
148 149 150
        (c->replstate == REDIS_REPL_NONE ||
         c->replstate == REDIS_REPL_ONLINE) &&
        aeCreateFileEvent(server.el, c->fd, AE_WRITABLE,
151 152 153 154
        sendReplyToClient, c) == AE_ERR) return REDIS_ERR;
    return REDIS_OK;
}

155 156 157 158 159 160 161 162 163 164 165 166 167 168
/* Create a duplicate of the last object in the reply list when
 * it is not exclusively owned by the reply list. */
robj *dupLastObjectIfNeeded(list *reply) {
    robj *new, *cur;
    listNode *ln;
    redisAssert(listLength(reply) > 0);
    ln = listLast(reply);
    cur = listNodeValue(ln);
    if (cur->refcount > 1) {
        new = dupStringObject(cur);
        decrRefCount(cur);
        listNodeValue(ln) = new;
    }
    return listNodeValue(ln);
169 170
}

171 172 173 174
/* -----------------------------------------------------------------------------
 * Low level functions to add more data to output buffers.
 * -------------------------------------------------------------------------- */

175
int _addReplyToBuffer(redisClient *c, char *s, size_t len) {
176
    size_t available = sizeof(c->buf)-c->bufpos;
177

178 179
    if (c->flags & REDIS_CLOSE_AFTER_REPLY) return REDIS_OK;

180 181 182 183 184 185
    /* If there already are entries in the reply list, we cannot
     * add anything more to the static buffer. */
    if (listLength(c->reply) > 0) return REDIS_ERR;

    /* Check that the buffer has enough space available for this string. */
    if (len > available) return REDIS_ERR;
186

187 188 189
    memcpy(c->buf+c->bufpos,s,len);
    c->bufpos+=len;
    return REDIS_OK;
190 191
}

192 193
void _addReplyObjectToList(redisClient *c, robj *o) {
    robj *tail;
194 195 196

    if (c->flags & REDIS_CLOSE_AFTER_REPLY) return;

197 198 199
    if (listLength(c->reply) == 0) {
        incrRefCount(o);
        listAddNodeTail(c->reply,o);
200
        c->reply_bytes += getStringObjectSdsUsedMemory(o);
201 202 203 204 205
    } else {
        tail = listNodeValue(listLast(c->reply));

        /* Append to this object when possible. */
        if (tail->ptr != NULL &&
206
            tail->encoding == REDIS_ENCODING_RAW &&
207 208
            sdslen(tail->ptr)+sdslen(o->ptr) <= REDIS_REPLY_CHUNK_BYTES)
        {
209
            c->reply_bytes -= zmalloc_size_sds(tail->ptr);
210 211
            tail = dupLastObjectIfNeeded(c->reply);
            tail->ptr = sdscatlen(tail->ptr,o->ptr,sdslen(o->ptr));
212
            c->reply_bytes += zmalloc_size_sds(tail->ptr);
213 214 215
        } else {
            incrRefCount(o);
            listAddNodeTail(c->reply,o);
216
            c->reply_bytes += getStringObjectSdsUsedMemory(o);
217 218
        }
    }
219
    asyncCloseClientOnOutputBufferLimitReached(c);
220
}
221

222 223 224 225
/* This method takes responsibility over the sds. When it is no longer
 * needed it will be free'd, otherwise it ends up in a robj. */
void _addReplySdsToList(redisClient *c, sds s) {
    robj *tail;
226

227 228 229 230
    if (c->flags & REDIS_CLOSE_AFTER_REPLY) {
        sdsfree(s);
        return;
    }
231

232 233
    if (listLength(c->reply) == 0) {
        listAddNodeTail(c->reply,createObject(REDIS_STRING,s));
234
        c->reply_bytes += zmalloc_size_sds(s);
235 236 237 238
    } else {
        tail = listNodeValue(listLast(c->reply));

        /* Append to this object when possible. */
239
        if (tail->ptr != NULL && tail->encoding == REDIS_ENCODING_RAW &&
240 241
            sdslen(tail->ptr)+sdslen(s) <= REDIS_REPLY_CHUNK_BYTES)
        {
242
            c->reply_bytes -= zmalloc_size_sds(tail->ptr);
243 244
            tail = dupLastObjectIfNeeded(c->reply);
            tail->ptr = sdscatlen(tail->ptr,s,sdslen(s));
245
            c->reply_bytes += zmalloc_size_sds(tail->ptr);
246
            sdsfree(s);
247
        } else {
248
            listAddNodeTail(c->reply,createObject(REDIS_STRING,s));
249
            c->reply_bytes += zmalloc_size_sds(s);
250
        }
251
    }
252
    asyncCloseClientOnOutputBufferLimitReached(c);
253 254 255 256
}

void _addReplyStringToList(redisClient *c, char *s, size_t len) {
    robj *tail;
257 258 259

    if (c->flags & REDIS_CLOSE_AFTER_REPLY) return;

260
    if (listLength(c->reply) == 0) {
261 262 263
        robj *o = createStringObject(s,len);

        listAddNodeTail(c->reply,o);
264
        c->reply_bytes += getStringObjectSdsUsedMemory(o);
265
    } else {
266 267 268
        tail = listNodeValue(listLast(c->reply));

        /* Append to this object when possible. */
269
        if (tail->ptr != NULL && tail->encoding == REDIS_ENCODING_RAW &&
270 271
            sdslen(tail->ptr)+len <= REDIS_REPLY_CHUNK_BYTES)
        {
272
            c->reply_bytes -= zmalloc_size_sds(tail->ptr);
273 274
            tail = dupLastObjectIfNeeded(c->reply);
            tail->ptr = sdscatlen(tail->ptr,s,len);
275
            c->reply_bytes += zmalloc_size_sds(tail->ptr);
276
        } else {
277 278 279
            robj *o = createStringObject(s,len);

            listAddNodeTail(c->reply,o);
280
            c->reply_bytes += getStringObjectSdsUsedMemory(o);
281 282
        }
    }
283
    asyncCloseClientOnOutputBufferLimitReached(c);
284
}
285

286 287 288 289 290
/* -----------------------------------------------------------------------------
 * Higher level functions to queue data on the client output buffer.
 * The following functions are the ones that commands implementations will call.
 * -------------------------------------------------------------------------- */

291
void addReply(redisClient *c, robj *obj) {
292
    if (prepareClientToWrite(c) != REDIS_OK) return;
293 294 295 296 297 298 299 300

    /* This is an important place where we can avoid copy-on-write
     * when there is a saving child running, avoiding touching the
     * refcount field of the object if it's not needed.
     *
     * If the encoding is RAW and there is room in the static buffer
     * we'll be able to send the object to the client without
     * messing with its page. */
301
    if (sdsEncodedObject(obj)) {
302 303
        if (_addReplyToBuffer(c,obj->ptr,sdslen(obj->ptr)) != REDIS_OK)
            _addReplyObjectToList(c,obj);
304 305 306 307 308 309 310 311 312 313 314 315 316 317
    } else if (obj->encoding == REDIS_ENCODING_INT) {
        /* Optimization: if there is room in the static buffer for 32 bytes
         * (more than the max chars a 64 bit integer can take as string) we
         * avoid decoding the object and go for the lower level approach. */
        if (listLength(c->reply) == 0 && (sizeof(c->buf) - c->bufpos) >= 32) {
            char buf[32];
            int len;

            len = ll2string(buf,sizeof(buf),(long)obj->ptr);
            if (_addReplyToBuffer(c,buf,len) == REDIS_OK)
                return;
            /* else... continue with the normal code path, but should never
             * happen actually since we verified there is room. */
        }
318
        obj = getDecodedObject(obj);
319 320 321
        if (_addReplyToBuffer(c,obj->ptr,sdslen(obj->ptr)) != REDIS_OK)
            _addReplyObjectToList(c,obj);
        decrRefCount(obj);
322 323
    } else {
        redisPanic("Wrong obj->encoding in addReply()");
324 325 326 327
    }
}

void addReplySds(redisClient *c, sds s) {
328
    if (prepareClientToWrite(c) != REDIS_OK) {
329 330 331 332
        /* The caller expects the sds to be free'd. */
        sdsfree(s);
        return;
    }
333
    if (_addReplyToBuffer(c,s,sdslen(s)) == REDIS_OK) {
334 335
        sdsfree(s);
    } else {
336 337
        /* This method free's the sds when it is no longer needed. */
        _addReplySdsToList(c,s);
338
    }
339 340
}

341
void addReplyString(redisClient *c, char *s, size_t len) {
342
    if (prepareClientToWrite(c) != REDIS_OK) return;
343 344
    if (_addReplyToBuffer(c,s,len) != REDIS_OK)
        _addReplyStringToList(c,s,len);
345
}
346

347
void addReplyErrorLength(redisClient *c, char *s, size_t len) {
348 349 350
    addReplyString(c,"-ERR ",5);
    addReplyString(c,s,len);
    addReplyString(c,"\r\n",2);
351 352
}

353
void addReplyError(redisClient *c, char *err) {
354
    addReplyErrorLength(c,err,strlen(err));
355
}
356

357
void addReplyErrorFormat(redisClient *c, const char *fmt, ...) {
358
    size_t l, j;
359 360 361 362
    va_list ap;
    va_start(ap,fmt);
    sds s = sdscatvprintf(sdsempty(),fmt,ap);
    va_end(ap);
363 364 365 366 367 368
    /* Make sure there are no newlines in the string, otherwise invalid protocol
     * is emitted. */
    l = sdslen(s);
    for (j = 0; j < l; j++) {
        if (s[j] == '\r' || s[j] == '\n') s[j] = ' ';
    }
369
    addReplyErrorLength(c,s,sdslen(s));
370 371 372
    sdsfree(s);
}

373
void addReplyStatusLength(redisClient *c, char *s, size_t len) {
374 375 376 377 378 379
    addReplyString(c,"+",1);
    addReplyString(c,s,len);
    addReplyString(c,"\r\n",2);
}

void addReplyStatus(redisClient *c, char *status) {
380
    addReplyStatusLength(c,status,strlen(status));
381 382 383 384 385 386 387
}

void addReplyStatusFormat(redisClient *c, const char *fmt, ...) {
    va_list ap;
    va_start(ap,fmt);
    sds s = sdscatvprintf(sdsempty(),fmt,ap);
    va_end(ap);
388
    addReplyStatusLength(c,s,sdslen(s));
389 390 391
    sdsfree(s);
}

392 393 394
/* Adds an empty object to the reply list that will contain the multi bulk
 * length, which is not known when this function is called. */
void *addDeferredMultiBulkLength(redisClient *c) {
395 396 397
    /* Note that we install the write event here even if the object is not
     * ready to be sent, since we are sure that before returning to the
     * event loop setDeferredMultiBulkLength() will be called. */
398
    if (prepareClientToWrite(c) != REDIS_OK) return NULL;
399
    listAddNodeTail(c->reply,createObject(REDIS_STRING,NULL));
400 401 402
    return listLast(c->reply);
}

G
guiquanz 已提交
403
/* Populate the length object and try gluing it to the next chunk. */
404 405 406 407 408 409 410 411 412
void setDeferredMultiBulkLength(redisClient *c, void *node, long length) {
    listNode *ln = (listNode*)node;
    robj *len, *next;

    /* Abort when *node is NULL (see addDeferredMultiBulkLength). */
    if (node == NULL) return;

    len = listNodeValue(ln);
    len->ptr = sdscatprintf(sdsempty(),"*%ld\r\n",length);
413
    len->encoding = REDIS_ENCODING_RAW; /* in case it was an EMBSTR. */
414
    c->reply_bytes += zmalloc_size_sds(len->ptr);
415 416
    if (ln->next != NULL) {
        next = listNodeValue(ln->next);
417

418
        /* Only glue when the next node is non-NULL (an sds in this case) */
419
        if (next->ptr != NULL) {
420
            c->reply_bytes -= zmalloc_size_sds(len->ptr);
421
            c->reply_bytes -= getStringObjectSdsUsedMemory(next);
422
            len->ptr = sdscatlen(len->ptr,next->ptr,sdslen(next->ptr));
423
            c->reply_bytes += zmalloc_size_sds(len->ptr);
424 425
            listDelNode(c->reply,ln->next);
        }
426
    }
427
    asyncCloseClientOnOutputBufferLimitReached(c);
428 429
}

G
guiquanz 已提交
430
/* Add a double as a bulk reply */
431 432 433
void addReplyDouble(redisClient *c, double d) {
    char dbuf[128], sbuf[128];
    int dlen, slen;
434 435 436 437 438 439 440 441 442
    if (isinf(d)) {
        /* Libc in odd systems (Hi Solaris!) will format infinite in a
         * different way, so better to handle it in an explicit way. */
        addReplyBulkCString(c, d > 0 ? "inf" : "-inf");
    } else {
        dlen = snprintf(dbuf,sizeof(dbuf),"%.17g",d);
        slen = snprintf(sbuf,sizeof(sbuf),"$%d\r\n%s\r\n",dlen,dbuf);
        addReplyString(c,sbuf,slen);
    }
443 444
}

445 446
/* Add a long long as integer reply or bulk len / multi bulk count.
 * Basically this is used to output <prefix><long long><crlf>. */
447
void addReplyLongLongWithPrefix(redisClient *c, long long ll, char prefix) {
448
    char buf[128];
449
    int len;
450 451 452 453 454 455 456 457 458 459 460 461

    /* Things like $3\r\n or *2\r\n are emitted very often by the protocol
     * so we have a few shared objects to use if the integer is small
     * like it is most of the times. */
    if (prefix == '*' && ll < REDIS_SHARED_BULKHDR_LEN) {
        addReply(c,shared.mbulkhdr[ll]);
        return;
    } else if (prefix == '$' && ll < REDIS_SHARED_BULKHDR_LEN) {
        addReply(c,shared.bulkhdr[ll]);
        return;
    }

462
    buf[0] = prefix;
463 464 465
    len = ll2string(buf+1,sizeof(buf)-1,ll);
    buf[len+1] = '\r';
    buf[len+2] = '\n';
466
    addReplyString(c,buf,len+3);
467 468
}

469
void addReplyLongLong(redisClient *c, long long ll) {
470 471 472 473 474
    if (ll == 0)
        addReply(c,shared.czero);
    else if (ll == 1)
        addReply(c,shared.cone);
    else
475
        addReplyLongLongWithPrefix(c,ll,':');
476
}
477

478
void addReplyMultiBulkLen(redisClient *c, long length) {
479 480 481 482
    if (length < REDIS_SHARED_BULKHDR_LEN)
        addReply(c,shared.mbulkhdr[length]);
    else
        addReplyLongLongWithPrefix(c,length,'*');
483 484
}

485
/* Create the length prefix of a bulk reply, example: $2234 */
486
void addReplyBulkLen(redisClient *c, robj *obj) {
487
    size_t len;
488

489
    if (sdsEncodedObject(obj)) {
490 491 492 493 494 495 496 497 498 499 500 501 502 503
        len = sdslen(obj->ptr);
    } else {
        long n = (long)obj->ptr;

        /* Compute how many bytes will take this integer as a radix 10 string */
        len = 1;
        if (n < 0) {
            len++;
            n = -n;
        }
        while((n = n/10) != 0) {
            len++;
        }
    }
504 505 506 507 508

    if (len < REDIS_SHARED_BULKHDR_LEN)
        addReply(c,shared.bulkhdr[len]);
    else
        addReplyLongLongWithPrefix(c,len,'$');
509 510
}

511
/* Add a Redis Object as a bulk reply */
512 513 514 515 516 517
void addReplyBulk(redisClient *c, robj *obj) {
    addReplyBulkLen(c,obj);
    addReply(c,obj);
    addReply(c,shared.crlf);
}

518 519
/* Add a C buffer as bulk reply */
void addReplyBulkCBuffer(redisClient *c, void *p, size_t len) {
520
    addReplyLongLongWithPrefix(c,len,'$');
521 522 523 524 525
    addReplyString(c,p,len);
    addReply(c,shared.crlf);
}

/* Add a C nul term string as bulk reply */
526 527 528 529
void addReplyBulkCString(redisClient *c, char *s) {
    if (s == NULL) {
        addReply(c,shared.nullbulk);
    } else {
530
        addReplyBulkCBuffer(c,s,strlen(s));
531 532 533
    }
}

534 535 536 537 538 539 540 541 542
/* Add a long long as a bulk reply */
void addReplyBulkLongLong(redisClient *c, long long ll) {
    char buf[64];
    int len;

    len = ll2string(buf,64,ll);
    addReplyBulkCBuffer(c,buf,len);
}

543 544 545 546 547 548 549 550
/* Copy 'src' client output buffers into 'dst' client output buffers.
 * The function takes care of freeing the old output buffers of the
 * destination client. */
void copyClientOutputBuffer(redisClient *dst, redisClient *src) {
    listRelease(dst->reply);
    dst->reply = listDup(src->reply);
    memcpy(dst->buf,src->buf,src->bufpos);
    dst->bufpos = src->bufpos;
551
    dst->reply_bytes = src->reply_bytes;
552 553
}

554
static void acceptCommonHandler(int fd, int flags) {
555
    redisClient *c;
556
    if ((c = createClient(fd)) == NULL) {
557 558 559
        redisLog(REDIS_WARNING,
            "Error registering fd event for the new client: %s (fd=%d)",
            strerror(errno),fd);
560
        close(fd); /* May be already closed, just ignore errors */
561 562 563 564
        return;
    }
    /* If maxclient directive is set and this is one client more... close the
     * connection. Note that we create the client instead to check before
G
guiquanz 已提交
565
     * for this condition, since now the socket is already set in non-blocking
566
     * mode and we can send an error for free using the Kernel I/O */
567
    if (listLength(server.clients) > server.maxclients) {
568 569 570 571 572 573
        char *err = "-ERR max number of clients reached\r\n";

        /* That's a best effort error message, don't check write errors */
        if (write(c->fd,err,strlen(err)) == -1) {
            /* Nothing to do, Just to avoid the warning... */
        }
574
        server.stat_rejected_conn++;
575 576 577 578
        freeClient(c);
        return;
    }
    server.stat_numconnections++;
579
    c->flags |= flags;
580 581
}

582 583
void acceptTcpHandler(aeEventLoop *el, int fd, void *privdata, int mask) {
    int cport, cfd;
584
    char cip[REDIS_IP_STR_LEN];
585 586 587 588
    REDIS_NOTUSED(el);
    REDIS_NOTUSED(mask);
    REDIS_NOTUSED(privdata);

589
    cfd = anetTcpAccept(server.neterr, fd, cip, sizeof(cip), &cport);
590
    if (cfd == AE_ERR) {
591
        redisLog(REDIS_WARNING,"Accepting client connection: %s", server.neterr);
592 593 594
        return;
    }
    redisLog(REDIS_VERBOSE,"Accepted %s:%d", cip, cport);
595
    acceptCommonHandler(cfd,0);
596 597 598 599 600 601 602 603
}

void acceptUnixHandler(aeEventLoop *el, int fd, void *privdata, int mask) {
    int cfd;
    REDIS_NOTUSED(el);
    REDIS_NOTUSED(mask);
    REDIS_NOTUSED(privdata);

604
    cfd = anetUnixAccept(server.neterr, fd);
605
    if (cfd == AE_ERR) {
606
        redisLog(REDIS_WARNING,"Accepting client connection: %s", server.neterr);
607 608 609
        return;
    }
    redisLog(REDIS_VERBOSE,"Accepted connection to %s", server.unixsocket);
610
    acceptCommonHandler(cfd,REDIS_UNIX_SOCKET);
611 612 613
}


614 615 616 617 618
static void freeClientArgv(redisClient *c) {
    int j;
    for (j = 0; j < c->argc; j++)
        decrRefCount(c->argv[j]);
    c->argc = 0;
619
    c->cmd = NULL;
620 621
}

622 623 624 625 626 627 628 629 630 631
/* Close all the slaves connections. This is useful in chained replication
 * when we resync with our own master and want to force all our slaves to
 * resync with us as well. */
void disconnectSlaves(void) {
    while (listLength(server.slaves)) {
        listNode *ln = listFirst(server.slaves);
        freeClient((redisClient*)ln->value);
    }
}

632 633 634 635 636 637 638 639 640 641 642 643 644 645
/* This function is called when the slave lose the connection with the
 * master into an unexpected way. */
void replicationHandleMasterDisconnection(void) {
    server.master = NULL;
    server.repl_state = REDIS_REPL_CONNECT;
    server.repl_down_since = server.unixtime;
    /* We lost connection with our master, force our slaves to resync
     * with us as well to load the new data set.
     *
     * If server.masterhost is NULL the user called SLAVEOF NO ONE so
     * slave resync is not needed. */
    if (server.masterhost != NULL) disconnectSlaves();
}

646 647 648
void freeClient(redisClient *c) {
    listNode *ln;

649 650 651
    /* If this is marked as current client unset it */
    if (server.current_client == c) server.current_client = NULL;

652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667
    /* If it is our master that's beging disconnected we should make sure
     * to cache the state to try a partial resynchronization later.
     *
     * Note that before doing this we make sure that the client is not in
     * some unexpected state, by checking its flags. */
    if (server.master &&
         (c->flags & REDIS_MASTER) &&
        !(c->flags & (REDIS_CLOSE_AFTER_REPLY|
                     REDIS_CLOSE_ASAP|
                     REDIS_BLOCKED|
                     REDIS_UNBLOCKED)))
    {
        replicationCacheMaster(c);
        return;
    }

668
    /* Free the query buffer */
669 670
    sdsfree(c->querybuf);
    c->querybuf = NULL;
671 672

    /* Deallocate structures used to block on blocking ops. */
673
    if (c->flags & REDIS_BLOCKED) unblockClient(c);
674
    dictRelease(c->bpop.keys);
675 676 677 678

    /* UNWATCH all the keys */
    unwatchAllKeys(c);
    listRelease(c->watched_keys);
679

680 681 682 683 684
    /* Unsubscribe from all the pubsub channels */
    pubsubUnsubscribeAllChannels(c,0);
    pubsubUnsubscribeAllPatterns(c,0);
    dictRelease(c->pubsub_channels);
    listRelease(c->pubsub_patterns);
685

686 687 688 689 690 691 692
    /* Close socket, unregister events, and remove list of replies and
     * accumulated arguments. */
    if (c->fd != -1) {
        aeDeleteFileEvent(server.el,c->fd,AE_READABLE);
        aeDeleteFileEvent(server.el,c->fd,AE_WRITABLE);
        close(c->fd);
    }
693 694
    listRelease(c->reply);
    freeClientArgv(c);
695

696
    /* Remove from the list of clients */
697 698 699 700 701
    if (c->fd != -1) {
        ln = listSearchKey(server.clients,c);
        redisAssert(ln != NULL);
        listDelNode(server.clients,ln);
    }
702

703
    /* When client was just unblocked because of a blocking operation,
A
antirez 已提交
704
     * remove it from the list of unblocked clients. */
705 706 707 708 709
    if (c->flags & REDIS_UNBLOCKED) {
        ln = listSearchKey(server.unblocked_clients,c);
        redisAssert(ln != NULL);
        listDelNode(server.unblocked_clients,ln);
    }
710 711 712

    /* Master/slave cleanup Case 1:
     * we lost the connection with a slave. */
713
    if (c->flags & REDIS_SLAVE) {
714 715 716 717
        if (c->replstate == REDIS_REPL_SEND_BULK) {
            if (c->repldbfd != -1) close(c->repldbfd);
            if (c->replpreamble) sdsfree(c->replpreamble);
        }
718 719 720 721
        list *l = (c->flags & REDIS_MONITOR) ? server.monitors : server.slaves;
        ln = listSearchKey(l,c);
        redisAssert(ln != NULL);
        listDelNode(l,ln);
722 723 724 725 726
        /* We need to remember the time when we started to have zero
         * attached slaves, as after some time we'll free the replication
         * backlog. */
        if (c->flags & REDIS_SLAVE && listLength(server.slaves) == 0)
            server.repl_no_slaves_since = server.unixtime;
727
        refreshGoodSlavesCount();
728
    }
729

730 731
    /* Master/slave cleanup Case 2:
     * we lost the connection with the master. */
732
    if (c->flags & REDIS_MASTER) replicationHandleMasterDisconnection();
733 734 735 736 737 738 739 740 741

    /* If this client was scheduled for async freeing we need to remove it
     * from the queue. */
    if (c->flags & REDIS_CLOSE_ASAP) {
        ln = listSearchKey(server.clients_to_close,c);
        redisAssert(ln != NULL);
        listDelNode(server.clients_to_close,ln);
    }

742 743
    /* Release other dynamically allocated client structure fields,
     * and finally release the client structure itself. */
744
    if (c->name) decrRefCount(c->name);
745 746 747 748 749
    zfree(c->argv);
    freeClientMultiState(c);
    zfree(c);
}

750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770
/* Schedule a client to free it at a safe time in the serverCron() function.
 * This function is useful when we need to terminate a client but we are in
 * a context where calling freeClient() is not possible, because the client
 * should be valid for the continuation of the flow of the program. */
void freeClientAsync(redisClient *c) {
    if (c->flags & REDIS_CLOSE_ASAP) return;
    c->flags |= REDIS_CLOSE_ASAP;
    listAddNodeTail(server.clients_to_close,c);
}

void freeClientsInAsyncFreeQueue(void) {
    while (listLength(server.clients_to_close)) {
        listNode *ln = listFirst(server.clients_to_close);
        redisClient *c = listNodeValue(ln);

        c->flags &= ~REDIS_CLOSE_ASAP;
        freeClient(c);
        listDelNode(server.clients_to_close,ln);
    }
}

771 772 773
void sendReplyToClient(aeEventLoop *el, int fd, void *privdata, int mask) {
    redisClient *c = privdata;
    int nwritten = 0, totwritten = 0, objlen;
774
    size_t objmem;
775 776 777 778
    robj *o;
    REDIS_NOTUSED(el);
    REDIS_NOTUSED(mask);

779 780
    while(c->bufpos > 0 || listLength(c->reply)) {
        if (c->bufpos > 0) {
781 782
            nwritten = write(fd,c->buf+c->sentlen,c->bufpos-c->sentlen);
            if (nwritten <= 0) break;
783 784 785 786 787 788 789 790 791 792 793 794
            c->sentlen += nwritten;
            totwritten += nwritten;

            /* If the buffer was sent, set bufpos to zero to continue with
             * the remainder of the reply. */
            if (c->sentlen == c->bufpos) {
                c->bufpos = 0;
                c->sentlen = 0;
            }
        } else {
            o = listNodeValue(listFirst(c->reply));
            objlen = sdslen(o->ptr);
795
            objmem = getStringObjectSdsUsedMemory(o);
796

797 798
            if (objlen == 0) {
                listDelNode(c->reply,listFirst(c->reply));
799
                c->reply_bytes -= objmem;
800 801
                continue;
            }
802

803 804
            nwritten = write(fd, ((char*)o->ptr)+c->sentlen,objlen-c->sentlen);
            if (nwritten <= 0) break;
805 806
            c->sentlen += nwritten;
            totwritten += nwritten;
807

808 809 810 811
            /* If we fully sent the object on head go to the next one */
            if (c->sentlen == objlen) {
                listDelNode(c->reply,listFirst(c->reply));
                c->sentlen = 0;
812
                c->reply_bytes -= objmem;
813
            }
814
        }
815
        /* Note that we avoid to send more than REDIS_MAX_WRITE_PER_EVENT
816 817 818
         * bytes, in a single threaded server it's a good idea to serve
         * other clients as well, even if a very large request comes from
         * super fast link that is always able to accept data (in real world
819 820 821 822 823 824 825
         * scenario think about 'KEYS *' against the loopback interface).
         *
         * However if we are over the maxmemory limit we ignore that and
         * just deliver as much data as it is possible to deliver. */
        if (totwritten > REDIS_MAX_WRITE_PER_EVENT &&
            (server.maxmemory == 0 ||
             zmalloc_used_memory() < server.maxmemory)) break;
826 827 828 829 830 831 832 833 834 835 836
    }
    if (nwritten == -1) {
        if (errno == EAGAIN) {
            nwritten = 0;
        } else {
            redisLog(REDIS_VERBOSE,
                "Error writing to client: %s", strerror(errno));
            freeClient(c);
            return;
        }
    }
A
antirez 已提交
837 838 839 840 841 842 843
    if (totwritten > 0) {
        /* For clients representing masters we don't count sending data
         * as an interaction, since we always send REPLCONF ACK commands
         * that take some time to just fill the socket output buffer.
         * We just rely on data / pings received for timeout detection. */
        if (!(c->flags & REDIS_MASTER)) c->lastinteraction = server.unixtime;
    }
844
    if (c->bufpos == 0 && listLength(c->reply) == 0) {
845 846
        c->sentlen = 0;
        aeDeleteFileEvent(server.el,c->fd,AE_WRITABLE);
P
Pieter Noordhuis 已提交
847 848

        /* Close connection after entire reply has been sent. */
849
        if (c->flags & REDIS_CLOSE_AFTER_REPLY) freeClient(c);
850 851 852 853 854
    }
}

/* resetClient prepare the client to process the next command */
void resetClient(redisClient *c) {
855 856
    redisCommandProc *prevcmd = c->cmd ? c->cmd->proc : NULL;

857
    freeClientArgv(c);
858 859
    c->reqtype = 0;
    c->multibulklen = 0;
860
    c->bulklen = -1;
861 862 863 864
    /* We clear the ASKING flag as well if we are not inside a MULTI, and
     * if what we just executed is not the ASKING command itself. */
    if (!(c->flags & REDIS_MULTI) && prevcmd != askingCommand)
        c->flags &= (~REDIS_ASKING);
865 866
}

867 868 869
int processInlineBuffer(redisClient *c) {
    char *newline = strstr(c->querybuf,"\r\n");
    int argc, j;
870
    sds *argv, aux;
871 872 873
    size_t querylen;

    /* Nothing to do without a \r\n */
874 875 876 877 878
    if (newline == NULL) {
        if (sdslen(c->querybuf) > REDIS_INLINE_MAX_SIZE) {
            addReplyError(c,"Protocol error: too big inline request");
            setProtocolError(c,0);
        }
879
        return REDIS_ERR;
880
    }
881 882 883

    /* Split the input buffer up to the \r\n */
    querylen = newline-(c->querybuf);
884 885 886
    aux = sdsnewlen(c->querybuf,querylen);
    argv = sdssplitargs(aux,&argc);
    sdsfree(aux);
887 888

    /* Leave data after the first line of the query in the buffer */
889
    sdsrange(c->querybuf,querylen+2,-1);
890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910

    /* Setup argv array on client structure */
    if (c->argv) zfree(c->argv);
    c->argv = zmalloc(sizeof(robj*)*argc);

    /* Create redis objects for all arguments. */
    for (c->argc = 0, j = 0; j < argc; j++) {
        if (sdslen(argv[j])) {
            c->argv[c->argc] = createObject(REDIS_STRING,argv[j]);
            c->argc++;
        } else {
            sdsfree(argv[j]);
        }
    }
    zfree(argv);
    return REDIS_OK;
}

/* Helper function. Trims query buffer to make the function that processes
 * multi bulk requests idempotent. */
static void setProtocolError(redisClient *c, int pos) {
911 912 913 914 915 916
    if (server.verbosity >= REDIS_VERBOSE) {
        sds client = getClientInfoString(c);
        redisLog(REDIS_VERBOSE,
            "Protocol error from client: %s", client);
        sdsfree(client);
    }
917
    c->flags |= REDIS_CLOSE_AFTER_REPLY;
918
    sdsrange(c->querybuf,pos,-1);
919 920 921 922
}

int processMultibulkBuffer(redisClient *c) {
    char *newline = NULL;
923 924
    int pos = 0, ok;
    long long ll;
925 926 927

    if (c->multibulklen == 0) {
        /* The client should have been reset */
928
        redisAssertWithInfo(c,NULL,c->argc == 0);
929 930

        /* Multi bulk length cannot be read without a \r\n */
931
        newline = strchr(c->querybuf,'\r');
932 933 934 935 936
        if (newline == NULL) {
            if (sdslen(c->querybuf) > REDIS_INLINE_MAX_SIZE) {
                addReplyError(c,"Protocol error: too big mbulk count string");
                setProtocolError(c,0);
            }
937
            return REDIS_ERR;
938
        }
939

P
Pieter Noordhuis 已提交
940 941 942 943
        /* Buffer should also contain \n */
        if (newline-(c->querybuf) > ((signed)sdslen(c->querybuf)-2))
            return REDIS_ERR;

944 945
        /* We know for sure there is a whole line since newline != NULL,
         * so go ahead and find out the multi bulk length. */
946
        redisAssertWithInfo(c,NULL,c->querybuf[0] == '*');
947 948
        ok = string2ll(c->querybuf+1,newline-(c->querybuf+1),&ll);
        if (!ok || ll > 1024*1024) {
949 950 951
            addReplyError(c,"Protocol error: invalid multibulk length");
            setProtocolError(c,pos);
            return REDIS_ERR;
952
        }
P
Pieter Noordhuis 已提交
953 954 955

        pos = (newline-c->querybuf)+2;
        if (ll <= 0) {
956
            sdsrange(c->querybuf,pos,-1);
P
Pieter Noordhuis 已提交
957 958 959
            return REDIS_OK;
        }

960
        c->multibulklen = ll;
961 962 963 964 965 966

        /* Setup argv array on client structure */
        if (c->argv) zfree(c->argv);
        c->argv = zmalloc(sizeof(robj*)*c->multibulklen);
    }

967
    redisAssertWithInfo(c,NULL,c->multibulklen > 0);
968 969 970
    while(c->multibulklen) {
        /* Read bulk length if unknown */
        if (c->bulklen == -1) {
971
            newline = strchr(c->querybuf+pos,'\r');
972 973 974 975 976
            if (newline == NULL) {
                if (sdslen(c->querybuf) > REDIS_INLINE_MAX_SIZE) {
                    addReplyError(c,"Protocol error: too big bulk count string");
                    setProtocolError(c,0);
                }
P
Pieter Noordhuis 已提交
977
                break;
978
            }
P
Pieter Noordhuis 已提交
979 980 981

            /* Buffer should also contain \n */
            if (newline-(c->querybuf) > ((signed)sdslen(c->querybuf)-2))
982
                break;
P
Pieter Noordhuis 已提交
983 984 985 986 987 988 989

            if (c->querybuf[pos] != '$') {
                addReplyErrorFormat(c,
                    "Protocol error: expected '$', got '%c'",
                    c->querybuf[pos]);
                setProtocolError(c,pos);
                return REDIS_ERR;
990
            }
P
Pieter Noordhuis 已提交
991 992 993 994 995 996 997 998 999

            ok = string2ll(c->querybuf+pos+1,newline-(c->querybuf+pos+1),&ll);
            if (!ok || ll < 0 || ll > 512*1024*1024) {
                addReplyError(c,"Protocol error: invalid bulk length");
                setProtocolError(c,pos);
                return REDIS_ERR;
            }

            pos += newline-(c->querybuf+pos)+2;
1000
            if (ll >= REDIS_MBULK_BIG_ARG) {
1001 1002
                size_t qblen;

1003 1004
                /* If we are going to read a large object from network
                 * try to make it likely that it will start at c->querybuf
1005
                 * boundary so that we can optimize object creation
1006
                 * avoiding a large copy of data. */
1007
                sdsrange(c->querybuf,pos,-1);
1008
                pos = 0;
1009
                qblen = sdslen(c->querybuf);
A
antirez 已提交
1010 1011
                /* Hint the sds library about the amount of bytes this string is
                 * going to contain. */
1012 1013
                if (qblen < ll+2)
                    c->querybuf = sdsMakeRoomFor(c->querybuf,ll+2-qblen);
A
antirez 已提交
1014
            }
P
Pieter Noordhuis 已提交
1015
            c->bulklen = ll;
1016 1017 1018 1019 1020 1021 1022
        }

        /* Read bulk argument */
        if (sdslen(c->querybuf)-pos < (unsigned)(c->bulklen+2)) {
            /* Not enough data (+2 == trailing \r\n) */
            break;
        } else {
1023
            /* Optimization: if the buffer contains JUST our bulk element
1024 1025 1026
             * instead of creating a new object by *copying* the sds we
             * just use the current sds string. */
            if (pos == 0 &&
1027
                c->bulklen >= REDIS_MBULK_BIG_ARG &&
1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041
                (signed) sdslen(c->querybuf) == c->bulklen+2)
            {
                c->argv[c->argc++] = createObject(REDIS_STRING,c->querybuf);
                sdsIncrLen(c->querybuf,-2); /* remove CRLF */
                c->querybuf = sdsempty();
                /* Assume that if we saw a fat argument we'll see another one
                 * likely... */
                c->querybuf = sdsMakeRoomFor(c->querybuf,c->bulklen+2);
                pos = 0;
            } else {
                c->argv[c->argc++] =
                    createStringObject(c->querybuf+pos,c->bulklen);
                pos += c->bulklen+2;
            }
1042 1043 1044 1045 1046 1047
            c->bulklen = -1;
            c->multibulklen--;
        }
    }

    /* Trim to pos */
1048
    if (pos) sdsrange(c->querybuf,pos,-1);
1049 1050

    /* We're done when c->multibulk == 0 */
1051 1052 1053
    if (c->multibulklen == 0) return REDIS_OK;

    /* Still not read to process the command */
1054 1055 1056 1057 1058 1059
    return REDIS_ERR;
}

void processInputBuffer(redisClient *c) {
    /* Keep processing while there is something in the input buffer */
    while(sdslen(c->querybuf)) {
1060 1061 1062
        /* Immediately abort if the client is in the middle of something. */
        if (c->flags & REDIS_BLOCKED) return;

1063 1064 1065 1066
        /* REDIS_CLOSE_AFTER_REPLY closes the connection once the reply is
         * written to the client. Make sure to not let the reply grow after
         * this flag has been set (i.e. don't process more commands). */
        if (c->flags & REDIS_CLOSE_AFTER_REPLY) return;
1067 1068 1069 1070 1071

        /* Determine request type when unknown. */
        if (!c->reqtype) {
            if (c->querybuf[0] == '*') {
                c->reqtype = REDIS_REQ_MULTIBULK;
1072
            } else {
1073
                c->reqtype = REDIS_REQ_INLINE;
1074 1075
            }
        }
1076 1077 1078 1079 1080 1081 1082

        if (c->reqtype == REDIS_REQ_INLINE) {
            if (processInlineBuffer(c) != REDIS_OK) break;
        } else if (c->reqtype == REDIS_REQ_MULTIBULK) {
            if (processMultibulkBuffer(c) != REDIS_OK) break;
        } else {
            redisPanic("Unknown request type");
1083
        }
1084 1085

        /* Multibulk processing could see a <= 0 length. */
1086 1087 1088 1089 1090 1091 1092
        if (c->argc == 0) {
            resetClient(c);
        } else {
            /* Only reset the client when the command was executed. */
            if (processCommand(c) == REDIS_OK)
                resetClient(c);
        }
1093 1094 1095 1096 1097
    }
}

void readQueryFromClient(aeEventLoop *el, int fd, void *privdata, int mask) {
    redisClient *c = (redisClient*) privdata;
1098
    int nread, readlen;
1099
    size_t qblen;
1100 1101 1102
    REDIS_NOTUSED(el);
    REDIS_NOTUSED(mask);

1103
    server.current_client = c;
1104 1105
    readlen = REDIS_IOBUF_LEN;
    /* If this is a multi bulk request, and we are processing a bulk reply
1106 1107 1108
     * that is large enough, try to maximize the probability that the query
     * buffer contains exactly the SDS string representing the object, even
     * at the risk of requiring more read(2) calls. This way the function
1109 1110 1111
     * processMultiBulkBuffer() can avoid copying buffers to create the
     * Redis Object representing the argument. */
    if (c->reqtype == REDIS_REQ_MULTIBULK && c->multibulklen && c->bulklen != -1
1112
        && c->bulklen >= REDIS_MBULK_BIG_ARG)
1113 1114 1115 1116 1117 1118
    {
        int remaining = (unsigned)(c->bulklen+2)-sdslen(c->querybuf);

        if (remaining < readlen) readlen = remaining;
    }

1119
    qblen = sdslen(c->querybuf);
1120
    if (c->querybuf_peak < qblen) c->querybuf_peak = qblen;
1121 1122
    c->querybuf = sdsMakeRoomFor(c->querybuf, readlen);
    nread = read(fd, c->querybuf+qblen, readlen);
1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136
    if (nread == -1) {
        if (errno == EAGAIN) {
            nread = 0;
        } else {
            redisLog(REDIS_VERBOSE, "Reading from client: %s",strerror(errno));
            freeClient(c);
            return;
        }
    } else if (nread == 0) {
        redisLog(REDIS_VERBOSE, "Client closed connection");
        freeClient(c);
        return;
    }
    if (nread) {
1137
        sdsIncrLen(c->querybuf,nread);
1138
        c->lastinteraction = server.unixtime;
1139
        if (c->flags & REDIS_MASTER) c->reploff += nread;
1140
    } else {
1141
        server.current_client = NULL;
1142 1143
        return;
    }
1144
    if (sdslen(c->querybuf) > server.client_max_querybuf_len) {
1145 1146 1147 1148
        sds ci = getClientInfoString(c), bytes = sdsempty();

        bytes = sdscatrepr(bytes,c->querybuf,64);
        redisLog(REDIS_WARNING,"Closing client that reached max query buffer length: %s (qbuf initial bytes: %s)", ci, bytes);
1149
        sdsfree(ci);
1150
        sdsfree(bytes);
1151 1152 1153
        freeClient(c);
        return;
    }
1154
    processInputBuffer(c);
1155
    server.current_client = NULL;
1156
}
1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175

void getClientsMaxBuffers(unsigned long *longest_output_list,
                          unsigned long *biggest_input_buffer) {
    redisClient *c;
    listNode *ln;
    listIter li;
    unsigned long lol = 0, bib = 0;

    listRewind(server.clients,&li);
    while ((ln = listNext(&li)) != NULL) {
        c = listNodeValue(ln);

        if (listLength(c->reply) > lol) lol = listLength(c->reply);
        if (sdslen(c->querybuf) > bib) bib = sdslen(c->querybuf);
    }
    *longest_output_list = lol;
    *biggest_input_buffer = bib;
}

1176
/* This is a helper function for getClientPeerId().
1177 1178 1179 1180 1181 1182 1183 1184 1185 1186
 * It writes the specified ip/port to "peerid" as a null termiated string
 * in the form ip:port if ip does not contain ":" itself, otherwise
 * [ip]:port format is used (for IPv6 addresses basically). */
void formatPeerId(char *peerid, size_t peerid_len, char *ip, int port) {
    if (strchr(ip,':'))
        snprintf(peerid,peerid_len,"[%s]:%d",ip,port);
    else
        snprintf(peerid,peerid_len,"%s:%d",ip,port);
}

A
antirez 已提交
1187 1188 1189 1190 1191 1192 1193 1194
/* A Redis "Peer ID" is a colon separated ip:port pair.
 * For IPv4 it's in the form x.y.z.k:pork, example: "127.0.0.1:1234".
 * For IPv6 addresses we use [] around the IP part, like in "[::1]:1234".
 * For Unix socekts we use path:0, like in "/tmp/redis:0".
 *
 * A Peer ID always fits inside a buffer of REDIS_PEER_ID_LEN bytes, including
 * the null term.
 *
A
antirez 已提交
1195 1196 1197 1198 1199 1200
 * The function returns REDIS_OK on succcess, and REDIS_ERR on failure.
 *
 * On failure the function still populates 'peerid' with the "?:0" string
 * in case you want to relax error checking or need to display something
 * anyway (see anetPeerToString implementation for more info). */
int getClientPeerId(redisClient *client, char *peerid, size_t peerid_len) {
A
antirez 已提交
1201 1202 1203 1204 1205 1206
    char ip[REDIS_IP_STR_LEN];
    int port;

    if (client->flags & REDIS_UNIX_SOCKET) {
        /* Unix socket client. */
        snprintf(peerid,peerid_len,"%s:0",server.unixsocket);
A
antirez 已提交
1207
        return REDIS_OK;
A
antirez 已提交
1208 1209
    } else {
        /* TCP client. */
A
antirez 已提交
1210
        int retval = anetPeerToString(client->fd,ip,sizeof(ip),&port);
1211
        formatPeerId(peerid,peerid_len,ip,port);
A
antirez 已提交
1212
        return (retval == -1) ? REDIS_ERR : REDIS_OK;
A
antirez 已提交
1213 1214 1215
    }
}

1216 1217
/* Turn a Redis client into an sds string representing its state. */
sds getClientInfoString(redisClient *client) {
A
antirez 已提交
1218
    char peerid[REDIS_PEER_ID_LEN], flags[16], events[3], *p;
1219
    int emask;
1220

A
antirez 已提交
1221
    getClientPeerId(client,peerid,sizeof(peerid));
1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234
    p = flags;
    if (client->flags & REDIS_SLAVE) {
        if (client->flags & REDIS_MONITOR)
            *p++ = 'O';
        else
            *p++ = 'S';
    }
    if (client->flags & REDIS_MASTER) *p++ = 'M';
    if (client->flags & REDIS_MULTI) *p++ = 'x';
    if (client->flags & REDIS_BLOCKED) *p++ = 'b';
    if (client->flags & REDIS_DIRTY_CAS) *p++ = 'd';
    if (client->flags & REDIS_CLOSE_AFTER_REPLY) *p++ = 'c';
    if (client->flags & REDIS_UNBLOCKED) *p++ = 'u';
1235
    if (client->flags & REDIS_CLOSE_ASAP) *p++ = 'A';
1236
    if (client->flags & REDIS_UNIX_SOCKET) *p++ = 'U';
1237
    if (p == flags) *p++ = 'N';
1238
    *p++ = '\0';
1239 1240 1241 1242 1243 1244

    emask = client->fd == -1 ? 0 : aeGetFileEvents(server.el,client->fd);
    p = events;
    if (emask & AE_READABLE) *p++ = 'r';
    if (emask & AE_WRITABLE) *p++ = 'w';
    *p = '\0';
1245
    return sdscatprintf(sdsempty(),
A
antirez 已提交
1246 1247
        "addr=%s fd=%d name=%s age=%ld idle=%ld flags=%s db=%d sub=%d psub=%d multi=%d qbuf=%lu qbuf-free=%lu obl=%lu oll=%lu omem=%lu events=%s cmd=%s",
        peerid,
1248 1249
        client->fd,
        client->name ? (char*)client->name->ptr : "",
1250 1251
        (long)(server.unixtime - client->ctime),
        (long)(server.unixtime - client->lastinteraction),
1252 1253 1254
        flags,
        client->db->id,
        (int) dictSize(client->pubsub_channels),
1255
        (int) listLength(client->pubsub_patterns),
1256
        (client->flags & REDIS_MULTI) ? client->mstate.count : -1,
1257
        (unsigned long) sdslen(client->querybuf),
1258
        (unsigned long) sdsavail(client->querybuf),
1259
        (unsigned long) client->bufpos,
1260
        (unsigned long) listLength(client->reply),
1261
        getClientOutputBufferMemoryUsage(client),
1262 1263
        events,
        client->lastcmd ? client->lastcmd->name : "NULL");
1264 1265
}

1266 1267 1268 1269 1270 1271 1272 1273
sds getAllClientsInfoString(void) {
    listNode *ln;
    listIter li;
    redisClient *client;
    sds o = sdsempty();

    listRewind(server.clients,&li);
    while ((ln = listNext(&li)) != NULL) {
1274 1275
        sds cs;

1276
        client = listNodeValue(ln);
1277 1278 1279
        cs = getClientInfoString(client);
        o = sdscatsds(o,cs);
        sdsfree(cs);
1280 1281 1282 1283 1284
        o = sdscatlen(o,"\n",1);
    }
    return o;
}

A
antirez 已提交
1285
void clientCommand(redisClient *c) {
A
antirez 已提交
1286 1287 1288 1289
    listNode *ln;
    listIter li;
    redisClient *client;

A
antirez 已提交
1290
    if (!strcasecmp(c->argv[1]->ptr,"list") && c->argc == 2) {
1291
        sds o = getAllClientsInfoString();
A
antirez 已提交
1292 1293
        addReplyBulkCBuffer(c,o,sdslen(o));
        sdsfree(o);
A
antirez 已提交
1294 1295 1296
    } else if (!strcasecmp(c->argv[1]->ptr,"kill") && c->argc == 3) {
        listRewind(server.clients,&li);
        while ((ln = listNext(&li)) != NULL) {
A
antirez 已提交
1297
            char peerid[REDIS_PEER_ID_LEN];
A
antirez 已提交
1298 1299

            client = listNodeValue(ln);
A
antirez 已提交
1300 1301 1302
            if (getClientPeerId(client,peerid,sizeof(peerid)) == REDIS_ERR)
                continue;
            if (strcmp(peerid,c->argv[2]->ptr) == 0) {
A
antirez 已提交
1303 1304 1305 1306 1307 1308 1309 1310 1311 1312
                addReply(c,shared.ok);
                if (c == client) {
                    client->flags |= REDIS_CLOSE_AFTER_REPLY;
                } else {
                    freeClient(client);
                }
                return;
            }
        }
        addReplyError(c,"No such client");
1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329
    } else if (!strcasecmp(c->argv[1]->ptr,"setname") && c->argc == 3) {
        int j, len = sdslen(c->argv[2]->ptr);
        char *p = c->argv[2]->ptr;

        /* Setting the client name to an empty string actually removes
         * the current name. */
        if (len == 0) {
            if (c->name) decrRefCount(c->name);
            c->name = NULL;
            addReply(c,shared.ok);
            return;
        }

        /* Otherwise check if the charset is ok. We need to do this otherwise
         * CLIENT LIST format will break. You should always be able to
         * split by space to get the different fields. */
        for (j = 0; j < len; j++) {
A
antirez 已提交
1330
            if (p[j] < '!' || p[j] > '~') { /* ASCII is assumed. */
1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345
                addReplyError(c,
                    "Client names cannot contain spaces, "
                    "newlines or special characters.");
                return;
            }
        }
        if (c->name) decrRefCount(c->name);
        c->name = c->argv[2];
        incrRefCount(c->name);
        addReply(c,shared.ok);
    } else if (!strcasecmp(c->argv[1]->ptr,"getname") && c->argc == 2) {
        if (c->name)
            addReplyBulk(c,c->name);
        else
            addReply(c,shared.nullbulk);
A
antirez 已提交
1346
    } else {
B
bitterb 已提交
1347
        addReplyError(c, "Syntax error, try CLIENT (LIST | KILL ip:port | GETNAME | SETNAME connection-name)");
A
antirez 已提交
1348 1349
    }
}
1350

1351 1352 1353
/* Rewrite the command vector of the client. All the new objects ref count
 * is incremented. The old command vector is freed, and the old objects
 * ref count is decremented. */
1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375
void rewriteClientCommandVector(redisClient *c, int argc, ...) {
    va_list ap;
    int j;
    robj **argv; /* The new argument vector */

    argv = zmalloc(sizeof(robj*)*argc);
    va_start(ap,argc);
    for (j = 0; j < argc; j++) {
        robj *a;
        
        a = va_arg(ap, robj*);
        argv[j] = a;
        incrRefCount(a);
    }
    /* We free the objects in the original vector at the end, so we are
     * sure that if the same objects are reused in the new vector the
     * refcount gets incremented before it gets decremented. */
    for (j = 0; j < c->argc; j++) decrRefCount(c->argv[j]);
    zfree(c->argv);
    /* Replace argv and argc with our new versions. */
    c->argv = argv;
    c->argc = argc;
1376
    c->cmd = lookupCommandOrOriginal(c->argv[0]->ptr);
1377
    redisAssertWithInfo(c,NULL,c->cmd != NULL);
1378 1379
    va_end(ap);
}
1380 1381 1382 1383 1384 1385

/* Rewrite a single item in the command vector.
 * The new val ref count is incremented, and the old decremented. */
void rewriteClientCommandArgument(redisClient *c, int i, robj *newval) {
    robj *oldval;
   
1386
    redisAssertWithInfo(c,NULL,i < c->argc);
1387 1388 1389 1390 1391 1392 1393
    oldval = c->argv[i];
    c->argv[i] = newval;
    incrRefCount(newval);
    decrRefCount(oldval);

    /* If this is the command name make sure to fix c->cmd. */
    if (i == 0) {
1394
        c->cmd = lookupCommandOrOriginal(c->argv[0]->ptr);
1395
        redisAssertWithInfo(c,NULL,c->cmd != NULL);
1396 1397
    }
}
1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410

/* This function returns the number of bytes that Redis is virtually
 * using to store the reply still not read by the client.
 * It is "virtual" since the reply output list may contain objects that
 * are shared and are not really using additional memory.
 *
 * The function returns the total sum of the length of all the objects
 * stored in the output list, plus the memory used to allocate every
 * list node. The static reply buffer is not taken into account since it
 * is allocated anyway.
 *
 * Note: this function is very fast so can be called as many time as
 * the caller wishes. The main usage of this function currently is
A
antirez 已提交
1411
 * enforcing the client output length limits. */
1412
unsigned long getClientOutputBufferMemoryUsage(redisClient *c) {
1413
    unsigned long list_item_size = sizeof(listNode)+sizeof(robj);
1414 1415 1416

    return c->reply_bytes + (list_item_size*listLength(c->reply));
}
1417

1418
/* Get the class of a client, used in order to enforce limits to different
1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431
 * classes of clients.
 *
 * The function will return one of the following:
 * REDIS_CLIENT_LIMIT_CLASS_NORMAL -> Normal client
 * REDIS_CLIENT_LIMIT_CLASS_SLAVE  -> Slave or client executing MONITOR command
 * REDIS_CLIENT_LIMIT_CLASS_PUBSUB -> Client subscribed to Pub/Sub channels
 */
int getClientLimitClass(redisClient *c) {
    if (c->flags & REDIS_SLAVE) return REDIS_CLIENT_LIMIT_CLASS_SLAVE;
    if (dictSize(c->pubsub_channels) || listLength(c->pubsub_patterns))
        return REDIS_CLIENT_LIMIT_CLASS_PUBSUB;
    return REDIS_CLIENT_LIMIT_CLASS_NORMAL;
}
1432

1433 1434 1435
int getClientLimitClassByName(char *name) {
    if (!strcasecmp(name,"normal")) return REDIS_CLIENT_LIMIT_CLASS_NORMAL;
    else if (!strcasecmp(name,"slave")) return REDIS_CLIENT_LIMIT_CLASS_SLAVE;
1436
    else if (!strcasecmp(name,"pubsub")) return REDIS_CLIENT_LIMIT_CLASS_PUBSUB;
1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448
    else return -1;
}

char *getClientLimitClassName(int class) {
    switch(class) {
    case REDIS_CLIENT_LIMIT_CLASS_NORMAL:   return "normal";
    case REDIS_CLIENT_LIMIT_CLASS_SLAVE:    return "slave";
    case REDIS_CLIENT_LIMIT_CLASS_PUBSUB:   return "pubsub";
    default:                                return NULL;
    }
}

1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489
/* The function checks if the client reached output buffer soft or hard
 * limit, and also update the state needed to check the soft limit as
 * a side effect.
 *
 * Return value: non-zero if the client reached the soft or the hard limit.
 *               Otherwise zero is returned. */
int checkClientOutputBufferLimits(redisClient *c) {
    int soft = 0, hard = 0, class;
    unsigned long used_mem = getClientOutputBufferMemoryUsage(c);

    class = getClientLimitClass(c);
    if (server.client_obuf_limits[class].hard_limit_bytes &&
        used_mem >= server.client_obuf_limits[class].hard_limit_bytes)
        hard = 1;
    if (server.client_obuf_limits[class].soft_limit_bytes &&
        used_mem >= server.client_obuf_limits[class].soft_limit_bytes)
        soft = 1;

    /* We need to check if the soft limit is reached continuously for the
     * specified amount of seconds. */
    if (soft) {
        if (c->obuf_soft_limit_reached_time == 0) {
            c->obuf_soft_limit_reached_time = server.unixtime;
            soft = 0; /* First time we see the soft limit reached */
        } else {
            time_t elapsed = server.unixtime - c->obuf_soft_limit_reached_time;

            if (elapsed <=
                server.client_obuf_limits[class].soft_limit_seconds) {
                soft = 0; /* The client still did not reached the max number of
                             seconds for the soft limit to be considered
                             reached. */
            }
        }
    } else {
        c->obuf_soft_limit_reached_time = 0;
    }
    return soft || hard;
}

/* Asynchronously close a client if soft or hard limit is reached on the
1490 1491
 * output buffer size. The caller can check if the client will be closed
 * checking if the client REDIS_CLOSE_ASAP flag is set.
1492 1493 1494 1495
 *
 * Note: we need to close the client asynchronously because this function is
 * called from contexts where the client can't be freed safely, i.e. from the
 * lower level functions pushing data inside the client output buffers. */
1496
void asyncCloseClientOnOutputBufferLimitReached(redisClient *c) {
1497
    redisAssert(c->reply_bytes < ULONG_MAX-(1024*64));
1498
    if (c->reply_bytes == 0 || c->flags & REDIS_CLOSE_ASAP) return;
1499 1500 1501 1502
    if (checkClientOutputBufferLimits(c)) {
        sds client = getClientInfoString(c);

        freeClientAsync(c);
1503
        redisLog(REDIS_WARNING,"Client %s scheduled to be closed ASAP for overcoming of output buffer limits.", client);
1504 1505 1506
        sdsfree(client);
    }
}
A
antirez 已提交
1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527

/* Helper function used by freeMemoryIfNeeded() in order to flush slaves
 * output buffers without returning control to the event loop. */
void flushSlavesOutputBuffers(void) {
    listIter li;
    listNode *ln;

    listRewind(server.slaves,&li);
    while((ln = listNext(&li))) {
        redisClient *slave = listNodeValue(ln);
        int events;

        events = aeGetFileEvents(server.el,slave->fd);
        if (events & AE_WRITABLE &&
            slave->replstate == REDIS_REPL_ONLINE &&
            listLength(slave->reply))
        {
            sendReplyToClient(server.el,slave->fd,slave,0);
        }
    }
}